VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 20, 2023· Updated Oct 2, 2024

WAGO: Improper Privilege Management in web-based management

CVE-2023-3379

Description

Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • WAGO/Compact Controller 100 (751-9301)v5
    Range: 0
  • Wago/Edge Controller (752-8303/8000-002)v5
    Range: 0
  • WAGO/PFC100 (750-810x/xxx-xxx)v5
    Range: 0
  • Wago/750-8202/PFC200cpe-rescue2 versions
    0+ 1 more
    • (no CPE)range: 0
    • (no CPE)range: 0
  • WAGO/Touch Panel 600 Advanced Line (762-5xxx)v5
    Range: 0
  • WAGO/Touch Panel 600 Marine Line (762-6xxx)v5
    Range: 0
  • WAGO/Touch Panel 600 Standard Line (762-4xxx)v5
    Range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.