CVEvulnerability

CVE-2023-4089

2.7 LOW Published 2023-10-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-610

Description

On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.

Affected configurations

• wago compact controller 100 firmware (>= 19 <= 26) • wago edge controller firmware (>= 18 <= 26) • wago pfc100 firmware (>= 16 <= 26) • wago pfc200 firmware (>= 16 <= 26) • wago touch panel 600 advanced firmware (>= 16 <= 26) • wago touch panel 600 marine firmware (>= 16 <= 26) • wago touch panel 600 standard firmware (>= 16 <= 26)

Related

Weakness · CWE (1)

  • CWE-610 Externally Controlled Reference to a Resource in Another Sphere weakness

References