WAGO: Improper privilege management in web-based management
There is a misconfiguration of access rights to a configuration tool of the web-based-management for a specific user, which allows to reset passwords of other users (except root). This allows an authenticated attacker to elevate his privileges.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-3379US | —OT elevated | — | ||
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escala… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- Mitigation
Restrict network access to the device. Do not directly connect the device to the internet.
- Fixed
Wago recommends all affected users to update to the firmware version listed below: ### Series WAGO PFC100/PFC200 and WAGO Compact Controller CC100 | Article Number | Fixed in Firmware Version | |-----------------------|----------------------------------| | 750-811x/xxx-xxx | FW22 Patch 2 | | 750-821x/xxx-xxx | FW26 | | 750-820x/xxx-xxx | FW22 Patch 2 | | 751-9301 | FW26 | ### Series WAGO Touch Panel 600 and WAGO Edge Controller | Article Number | Fixed in Firmware Version | |-----------------------|----------------------------------| | 762-4xxx | FW26 | | 762-5xxx | FW26 | | 762-6xxx | FW26 | | 752-8303/8000-002 | FW26 | FW22 Patch 2 will be available in Q1 2024.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan