WAGO: Improper Privilege Management in web-based management
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Compact Controller 100 (751-9301)
Vendor
WAGO
Product
Compact Controller 100 (751-9301)
Platforms
Unknown
Default status
unaffected
Compact Controller 100 (751-9301) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
FW25
None listed
PFC100 (750-810x/xxx-xxx)
Vendor
WAGO
Product
PFC100 (750-810x/xxx-xxx)
Platforms
Unknown
Default status
unaffected
PFC100 (750-810x/xxx-xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
FW22 Patch 1
None listed
PFC200 (750-820x/xxx-xxx)
Vendor
WAGO
Product
PFC200 (750-820x/xxx-xxx)
Platforms
Unknown
Default status
unaffected
PFC200 (750-820x/xxx-xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
FW25
None listed
PFC200 (750-821x/xxx-xxx)
Vendor
WAGO
Product
PFC200 (750-821x/xxx-xxx)
Platforms
Unknown
Default status
unaffected
PFC200 (750-821x/xxx-xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
FW22 Patch 1
None listed
Touch Panel 600 Advanced Line (762-5xxx)
Vendor
WAGO
Product
Touch Panel 600 Advanced Line (762-5xxx)
Platforms
Unknown
Default status
unaffected
Touch Panel 600 Advanced Line (762-5xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
FW25
None listed
Touch Panel 600 Marine Line (762-6xxx)
Vendor
WAGO
Product
Touch Panel 600 Marine Line (762-6xxx)
Platforms
Unknown
Default status
unaffected
Touch Panel 600 Marine Line (762-6xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
FW25
None listed
Touch Panel 600 Standard Line (762-4xxx)
Vendor
WAGO
Product
Touch Panel 600 Standard Line (762-4xxx)
Platforms
Unknown
Default status
unaffected
Touch Panel 600 Standard Line (762-4xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
FW25
None listed
Edge Controller (752-8303/8000-002)
Vendor
Wago
Product
Edge Controller (752-8303/8000-002)
Platforms
Unknown
Default status
unaffected
Edge Controller (752-8303/8000-002) · Scoped product and version facts