Wago: Vulnerability in WBM through Open VPN
view advisory published 2026-04-08
A security vulnerability has been identified in the Web-Based Management (WBM) function when OpenVPN is enabled.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-1490US | — | — | ||
An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permit… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- Mitigation
The user is able to drop privileges of OpenVPN. How to do this is described in the manual "WAGO I/O System 750/753" at section 7.1.1.5.1.
https://www.wago.com/de/d/12464650#versions
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan