WAGO: Unauthenticated command execution via Web-based-management UPDATE A
The 'legal information' plugin of web-based-management contained a vulnerability which allowed execution of arbitrary commands with privileges of www user. UPDATE A 15.06.2023 : Removed PFC100 with FW23 as affected product and from solution PFC200 with FW23 is only affected on 750-821x/xxx-xxx Renamed "FW22 Patch 1" to "FW22 SP1" to match the versions of the download portal
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-1698US | — | Exploit | ||
In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behav… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- Mitigation
As general security measures strongly WAGO recommends: Use general security best practices to protect systems from local and network attacks. Do not allow direct access to the device from untrusted networks. Update to the latest firmware according to the table in chapter solutions. Industrial control systems (ICS) should not be directly accessible from the Internet, but should be protected by consistently applying the defense-in-depth strategy. The BSI provides general information on securing ICS in the ICS Compendium (https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/ICS/ICS-Security_compendium.pdf).
- Fixed
Wago recommends all affected users to update to the firmware version listed below: | Article No° | Product Name | Fixed Version | |----------------------|------------------------------|----------------------------------| | 751-9301 | Compact Controller CC100 | FW24 | | 752-8303/8000-002 | Edge Controller | FW22 | | 752-8303/8000-002 | Edge Controller | FW24 | | 750-81xx/xxx-xxx | PFC100 | FW22 SP1 | | 750-82xx/xxx-xxx | PFC200 | FW22 SP1 l | | 750-821x/xxx-xxx | PFC200 | FW24 | | 762-5xxx | Touch Panel 600 Advanced Line| FW22 SP1 | | 762-5xxx | Touch Panel 600 Advanced Line| FW24 | | 762-6xxx | Touch Panel 600 Marine Line | FW22 SP1 | | 762-6xxx | Touch Panel 600 Marine Line | FW24 | | 762-4xxx | Touch Panel 600 Standard Line| FW22 SP1 | | 762-4xxx | Touch Panel 600 Standard Line| FW24 |
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan