WAGO: Missing Authentication for Critical Function
The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Compact Controller CC100 (751-9301)
Vendor
WAGO
Product
Compact Controller CC100 (751-9301)
Platforms
Unknown
Default status
unaffected
Compact Controller CC100 (751-9301) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
FW22 Patch 1
unaffected
Unavailable
Unavailable
Unavailable
None listed
FW23
affected
Unavailable
Unavailable
Unavailable
None listed
Edge Controller (752-8303/8000-002)
Vendor
WAGO
Product
Edge Controller (752-8303/8000-002)
Platforms
Unknown
Default status
unaffected
Edge Controller (752-8303/8000-002) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
FW22 Patch 1
unaffected
Unavailable
Unavailable
Unavailable
None listed
FW23
affected
Unavailable
Unavailable
Unavailable
None listed
PFC100 (750-81xx/xxx-xxx)
Vendor
WAGO
Product
PFC100 (750-81xx/xxx-xxx)
Platforms
Unknown
Default status
unaffected
PFC100 (750-81xx/xxx-xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
FW22 Patch 1
unaffected
Unavailable
Unavailable
Unavailable
None listed
FW23
affected
Unavailable
Unavailable
Unavailable
None listed
PFC200 (750-82xx/xxx-xxx)
Vendor
WAGO
Product
PFC200 (750-82xx/xxx-xxx)
Platforms
Unknown
Default status
unaffected
PFC200 (750-82xx/xxx-xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
FW22 Patch 1
unaffected
Unavailable
Unavailable
Unavailable
None listed
FW23
affected
Unavailable
Unavailable
Unavailable
None listed
Touch Panel 600 Advanced Line (762-5xxx)
Vendor
WAGO
Product
Touch Panel 600 Advanced Line (762-5xxx)
Platforms
Unknown
Default status
unaffected
Touch Panel 600 Advanced Line (762-5xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
FW22 Patch 1
unaffected
Unavailable
Unavailable
Unavailable
None listed
FW23
affected
Unavailable
Unavailable
Unavailable
None listed
Touch Panel 600 Marine Line (762-6xxx)
Vendor
WAGO
Product
Touch Panel 600 Marine Line (762-6xxx)
Platforms
Unknown
Default status
unaffected
Touch Panel 600 Marine Line (762-6xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
FW22 Patch 1
unaffected
Unavailable
Unavailable
Unavailable
None listed
FW23
affected
Unavailable
Unavailable
Unavailable
None listed
Touch Panel 600 Standard Line (762-4xxx)
Vendor
WAGO
Product
Touch Panel 600 Standard Line (762-4xxx)
Platforms
Unknown
Default status
unaffected
Touch Panel 600 Standard Line (762-4xxx) · Scoped product and version facts