WAGO: Vulnerability in WAGO Navigator
view advisory published 2024-05-21
The WAGO Navigator versions 1.0.1 and 1.0 are vulnerable due to the use of the WiX toolset version 3.11.2.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-29187US | — | — | ||
WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an i… | ||||
| CVE-2024-24810US | high7.8 | — | ||
WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folder is vulnerable to DLL redirection attacks that allow the at… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- Fixed
A fix is available with the WAGO Navigator 1.0.2 and is accessible through the WAGO download center.
- Fixed
A fix is available with the WAGO Navigator 1.0.2 and is accessible through the WAGO download center.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan