Wago: Vulnerability in Smart Designer Web-Application
view advisory published 2023-12-05
An attacker with privileges can enumerate projects and usernames through an iterative process, by making a request to a specific endpoint.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-5872US | — | — | ||
In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requests to an specific endpoint. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- FixedSmart Designer
A patch for the WAGO Smart Designer will be available with version 2.34.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan