WAGO: Multiple products vulnerable to local file inclusion
view advisory published 2023-10-23
An attacker with administrative privileges which can access sensitive files, can additionally access them in an unintended, undocumented way.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-4089US | — | — | ||
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This ac… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- Fixed
Update to Firmware 4.7.1 (FW29), Firmware 03.10.11 (FW22 Patch 2). For the latest Custom Firmware, please contact the WAGO support.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan