Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-41972

WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO CC100 0751-9x01

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO PFC100 G2 0750-811x-xxxx-xxxx

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO PFC200 G2 750-821x-xxx-xxx

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-420x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-430x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-520x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-530x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-620x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-630x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO Edge Controller 0752-8303/8000-0002

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO PFC200 G2 0750-821x/xxx-xxx

Default version status: unaffected

  • 0.0.0 to ≤ 04.04.03 (70)affected

WAGO CC100 0751/9x01

Default version status: unaffected

  • 0.0.0 to ≤ 04.03.03 (72)affected

WAGO CC100 0751/9x01

Default version status: unaffected

  • 0.0.0 to ≤ 04.04.03 (70)affected

References