NetSight
critical9.8

CVE-2023-1698

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can resul…

Impact

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.

Affected products

VendorProductAffected versions
WagoCompact Controller 100 Firmware
from 20 through 23
WagoEdge Controller Firmware
Version 22
WagoPfc100 Firmware
from 20 through 23
WagoPfc200 Firmware
from 20 through 23
WagoTouch Panel 600 Advanced Firmware
Version 22
WagoTouch Panel 600 Marine Firmware
Version 22
WagoTouch Panel 600 Standard Firmware
Version 22

Weakness classification

References