← CVE Intelligence

CVE-2023-1698

WAGO: WBM Command Injection in multiple products PUBLISHED

Description (CNA)

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.

Affected (CNA)

Vendor / productVersions
WAGO / Compact Controller CC100affected FW20 through FW22; affected FW23
WAGO / Edge Controlleraffected FW22
WAGO / PFC100affected FW20 through FW22; affected FW23
WAGO / PFC200affected FW20 through FW22; affected FW23
WAGO / Touch Panel 600 Advanced Lineaffected FW22
WAGO / Touch Panel 600 Marine Lineaffected FW22
WAGO / Touch Panel 600 Standard Lineaffected FW22

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.