CVE-2023-3379
20.11.2023, 08:15
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges.Enginsight
| Vendor | Product | Version |
|---|---|---|
| wago | compact_controller_100_firmware | 𝑥 ≤ 25 |
| wago | edge_controller_firmware | 𝑥 ≤ 25 |
| wago | pfc100_firmware | 𝑥 < 22 |
| wago | pfc200_firmware | 𝑥 < 22 |
| wago | touch_panel_600_advanced_firmware | 𝑥 ≤ 25 |
| wago | touch_panel_600_marine_firmware | 𝑥 ≤ 25 |
| wago | touch_panel_600_standard_firmware | 𝑥 ≤ 25 |
𝑥
= Vulnerable software versions