Description (CNA)
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WAGO / Compact Controller 100 (751-9301) | affected 0 through FW25 |
| WAGO / PFC100 (750-810x/xxx-xxx) | affected 0 through FW22 Patch 1 |
| WAGO / PFC200 (750-820x/xxx-xxx) | affected 0 through FW25 |
| WAGO / PFC200 (750-821x/xxx-xxx) | affected 0 through FW22 Patch 1 |
| WAGO / Touch Panel 600 Advanced Line (762-5xxx) | affected 0 through FW25 |
| WAGO / Touch Panel 600 Marine Line (762-6xxx) | affected 0 through FW25 |
| WAGO / Touch Panel 600 Standard Line (762-4xxx) | affected 0 through FW25 |
| Wago / Edge Controller (752-8303/8000-002) | affected 0 through FW25 |
CWE
CWE-863
References
ADP enrichment
No English description supplied.