Lucene search

[email protected]CVE-2023-4089

HistoryOct 17, 2023 - 7:15 a.m.

CVE-2023-4089

2023-10-1707:15:10

CWE-610

[email protected]

web.nvd.nist.gov

wago

products

remote attacker

file access

local file inclusion

cve-2023-4089

nvd

2.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

4.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.2%

JSON

On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.

Affected configurations

NVD

Node

wagocompact_controller_100Match-

AND

wagocompact_controller_100_firmwareRange19–26

Node

wagoedge_controllerMatch-

AND

wagoedge_controller_firmwareRange18–26

Node

wagopfc100Match-

AND

wagopfc100_firmwareRange16–26

Node

wagopfc200Match-

AND

wagopfc200_firmwareRange16–26

Node

wagotouch_panel_600_advancedMatch-

AND

wagotouch_panel_600_advanced_firmwareRange16–26

Node

wagotouch_panel_600_marineMatch-

AND

wagotouch_panel_600_marine_firmwareRange16–26

Node

wagotouch_panel_600_standardMatch-

AND

wagotouch_panel_600_standard_firmwareRange16–26

CPENameOperatorVersion
wago:compact_controller_100_firmwarewago compact controller 100 firmwarele26

CPE	Name	Operator	Version
wago:compact_controller_100_firmware	wago compact controller 100 firmware	le	26

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Compact Controller CC100",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW26",
        "status": "affected",
        "version": "FW19",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Edge Controller",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW26",
        "status": "affected",
        "version": "FW18",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PFC100",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW26",
        "status": "affected",
        "version": "FW16",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PFC200",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW26",
        "status": "affected",
        "version": "FW16",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Touch Panel 600 Advanced Line",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW26",
        "status": "affected",
        "version": "FW16",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Touch Panel 600 Marine Line",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW26",
        "status": "affected",
        "version": "FW16",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Touch Panel 600 Standard Line",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW26",
        "status": "affected",
        "version": "FW16",
        "versionType": "semver"
      }
    ]
  }
]