Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-41973

WAGO: Remote Arbitrary File Write with Root Privileges in multiple Devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO CC100 0751-9x01

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO PFC100 G2 0750-811x-xxxx-xxxx

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO PFC200 G2 750-821x-xxx-xxx

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-420x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-430x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-520x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-530x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-620x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO TP600 0762-630x/8000-000x

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO Edge Controller 0752-8303/8000-0002

Default version status: unaffected

  • 0.0.0 to ≤ 4.5.10 (FW27)affected

WAGO PFC200 G2 0750-821x/xxx-xxx

Default version status: unaffected

  • 0.0.0 to ≤ 04.04.03 (70)affected

WAGO CC100 0751/9x01

Default version status: unaffected

  • 0.0.0 to ≤ 04.03.03 (72)affected

WAGO CC100 0751/9x01

Default version status: unaffected

  • 0.0.0 to ≤ 04.04.03 (70)affected

References