CVE-2023-4089 — WAGO: Multiple products vulnerable to local file inclusion

Description (CNA)

On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.

Affected (CNA)

Vendor / product	Versions
WAGO / Compact Controller CC100	affected FW19 through FW26
WAGO / Edge Controller	affected FW18 through FW26
WAGO / PFC100	affected FW16 through FW26
WAGO / PFC200	affected FW16 through FW26
WAGO / Touch Panel 600 Advanced Line	affected FW16 through FW26
WAGO / Touch Panel 600 Marine Line	affected FW16 through FW26
WAGO / Touch Panel 600 Standard Line	affected FW16 through FW26

CWE

CWE-610

References

https://cert.vde.com/en/advisories/VDE-2023-046/

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2023-046/

CISA-ADP

No English description supplied.

No references supplied.