Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2024-41970

WAGO: Unauthorized Diagnostic Data Exposure in Multiple Devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO CC100 0751-9x01

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO PFC100 G2 0750-811x-xxxx-xxxx

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO PFC200 G2 750-821x-xxx-xxx

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-420x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-430x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-520x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-530x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-620x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-630x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO Edge Controller 0752-8303/8000-0002

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO PFC200 G2 0750-821x/xxx-xxx

Default version status: unaffected

  • 0.0.0 to ≤ 04.04.03 (70)affected

WAGO CC100 0751/9x01

Default version status: unaffected

  • 0.0.0 to ≤ 04.03.03 (72)affected

WAGO CC100 0751/9x01

Default version status: unaffected

  • 0.0.0 to ≤ 04.04.03 (70)affected

References