Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-41971

WAGO: Arbitrary File Overwrite in Multiple Devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO CC100 0751-9x01

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO PFC100 G2 0750-811x-xxxx-xxxx

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO PFC200 G2 750-821x-xxx-xxx

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-420x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-430x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-520x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-530x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-620x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-630x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO Edge Controller 0752-8303/8000-0002

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO PFC200 G2 0750-821x/xxx-xxx

Default version status: unaffected

  • 0.0.0 to ≤ 04.04.03 (70)affected

WAGO CC100 0751/9x01

Default version status: unaffected

  • 0.0.0 to ≤ 04.03.03 (72)affected

WAGO CC100 0751/9x01

Default version status: unaffected

  • 0.0.0 to ≤ 04.04.03 (70)affected

References