← CVE Intelligence

CVE-2024-41973

WAGO: Remote Arbitrary File Write with Root Privileges in multiple Devices PUBLISHED

Description (CNA)

A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.

Affected (CNA)

Vendor / product	Versions
WAGO / CC100 0751-9x01	affected 0.0.0 through 4.5.10 (FW27)
WAGO / PFC100 G2 0750-811x-xxxx-xxxx	affected 0.0.0 through 4.5.10 (FW27)
WAGO / PFC200 G2 750-821x-xxx-xxx	affected 0.0.0 through 4.5.10 (FW27)
WAGO / TP600 0762-420x/8000-000x	affected 0.0.0 through 4.5.10 (FW27)
WAGO / TP600 0762-430x/8000-000x	affected 0.0.0 through 4.5.10 (FW27)
WAGO / TP600 0762-520x/8000-000x	affected 0.0.0 through 4.5.10 (FW27)
WAGO / TP600 0762-530x/8000-000x	affected 0.0.0 through 4.5.10 (FW27)
WAGO / TP600 0762-620x/8000-000x	affected 0.0.0 through 4.5.10 (FW27)
WAGO / TP600 0762-630x/8000-000x	affected 0.0.0 through 4.5.10 (FW27)
WAGO / Edge Controller 0752-8303/8000-0002	affected 0.0.0 through 4.5.10 (FW27)
WAGO / PFC200 G2 0750-821x/xxx-xxx	affected 0.0.0 through 04.04.03 (70)
WAGO / CC100 0751/9x01	affected 0.0.0 through 04.03.03 (72)
WAGO / CC100 0751/9x01	affected 0.0.0 through 04.04.03 (70)

CWE

CWE-35

References

https://cert.vde.com/en/advisories/VDE-2024-047

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.