CVE-2023-4089
17.10.2023, 07:15
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.Enginsight
Vendor | Product | Version |
---|---|---|
wago | compact_controller_100_firmware | 19 ≤ 𝑥 ≤ 26 |
wago | edge_controller_firmware | 18 ≤ 𝑥 ≤ 26 |
wago | pfc100_firmware | 16 ≤ 𝑥 ≤ 26 |
wago | pfc200_firmware | 16 ≤ 𝑥 ≤ 26 |
wago | touch_panel_600_advanced_firmware | 16 ≤ 𝑥 ≤ 26 |
wago | touch_panel_600_marine_firmware | 16 ≤ 𝑥 ≤ 26 |
wago | touch_panel_600_standard_firmware | 16 ≤ 𝑥 ≤ 26 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration