VulnerabilityModified
CVE-2023-4089
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion.
LOW 2.7EPSS 0.47%
Does this matter?
Lower severity and a low EPSS score (0.47%). Track it; it rarely justifies an emergency change on its own.
Description
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.
- CVSS 3.1
- 2.7 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.47% probability · 39th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-610
- Affected
- wago/compact controller 100 firmware · wago/edge controller firmware · wago/pfc100 firmware · wago/pfc200 firmware · wago/touch panel 600 advanced firmware · wago/touch panel 600 marine firmware · wago/touch panel 600 standard firmware
- Source
- info@cert.vde.com
References
- https://cert.vde.com/en/advisories/VDE-2023-046/Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2023-046/Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.