In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWago Compact Controller 100
HWWagowszystkie wersjeWago Compact Controller 100 Firmware
OSWago20 – 23Wago Edge Controller
HWWagowszystkie wersjeWago Edge Controller Firmware
OSWago22Wago Pfc100
HWWagowszystkie wersjeWago Pfc100 Firmware
OSWago20 – 23Wago Pfc200
HWWagowszystkie wersjeWago Pfc200 Firmware
OSWago20 – 23Wago Touch Panel 600 Advanced
HWWagowszystkie wersjeWago Touch Panel 600 Advanced Firmware
OSWago22Wago Touch Panel 600 Marine
HWWagowszystkie wersjeWago Touch Panel 600 Marine Firmware
OSWago22Wago Touch Panel 600 Standard
HWWagowszystkie wersjeWago Touch Panel 600 Standard Firmware
OSWago22
Powiązane podatności
The configuration backend of the web-based management can be used by unauthenticated users, although only auth...
The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the s...
The reported vulnerability allows an attacker who has network access to the device to execute code with specia...
An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC2...
An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO P...