WAGO: Missing authentication for config export functionality in multiple products
The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Series WAGO PFC100
Vendor
WAGO
Product
Series WAGO PFC100
Platforms
Unknown
Default status
unaffected
Series WAGO PFC100 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
semver
Unavailable
FW22
None listed
Series WAGO PFC200
Vendor
WAGO
Product
Series WAGO PFC200
Platforms
Unknown
Default status
unaffected
Series WAGO PFC200 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
semver
Unavailable
FW22
None listed
Series WAGO Touch Panel 600 Advanced Line
Vendor
WAGO
Product
Series WAGO Touch Panel 600 Advanced Line
Platforms
Unknown
Default status
unaffected
Series WAGO Touch Panel 600 Advanced Line · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
semver
Unavailable
FW22
None listed
Series WAGO Touch Panel 600 Marine Line
Vendor
WAGO
Product
Series WAGO Touch Panel 600 Marine Line
Platforms
Unknown
Default status
unaffected
Series WAGO Touch Panel 600 Marine Line · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
semver
Unavailable
FW22
None listed
Series WAGO Touch Panel 600 Standard Line
Vendor
WAGO
Product
Series WAGO Touch Panel 600 Standard Line
Platforms
Unknown
Default status
unaffected
Series WAGO Touch Panel 600 Standard Line · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
semver
Unavailable
FW22
None listed
WAGO Compact Controller CC100
Vendor
WAGO
Product
WAGO Compact Controller CC100
Platforms
Unknown
Default status
unaffected
WAGO Compact Controller CC100 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
semver
Unavailable
FW22
None listed
WAGO Edge Controller
Vendor
WAGO
Product
WAGO Edge Controller
Platforms
Unknown
Default status
unaffected
WAGO Edge Controller · Scoped product and version facts