medium5.3
CVE-2023-3379
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin user…
Impact
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wago | Compact Controller 100 Firmware | through 25 |
| Wago | Edge Controller Firmware | through 25 |
| Wago | Pfc100 Firmware | before 22 Version 22 |
| Wago | Pfc200 Firmware | before 22 Versions 22, 23, 24 |
| Wago | Touch Panel 600 Advanced Firmware | through 25 |
| Wago | Touch Panel 600 Marine Firmware | through 25 |
| Wago | Touch Panel 600 Standard Firmware | through 25 |