WAGO: Multiple products vulnerable to local file inclusion
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Compact Controller CC100
Vendor
WAGO
Product
Compact Controller CC100
Platforms
Unknown
Default status
unaffected
Compact Controller CC100 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW19
affected
semver
Unavailable
FW26
None listed
Edge Controller
Vendor
WAGO
Product
Edge Controller
Platforms
Unknown
Default status
unaffected
Edge Controller · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW18
affected
semver
Unavailable
FW26
None listed
PFC100
Vendor
WAGO
Product
PFC100
Platforms
Unknown
Default status
unaffected
PFC100 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
semver
Unavailable
FW26
None listed
PFC200
Vendor
WAGO
Product
PFC200
Platforms
Unknown
Default status
unaffected
PFC200 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
semver
Unavailable
FW26
None listed
Touch Panel 600 Advanced Line
Vendor
WAGO
Product
Touch Panel 600 Advanced Line
Platforms
Unknown
Default status
unaffected
Touch Panel 600 Advanced Line · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
semver
Unavailable
FW26
None listed
Touch Panel 600 Marine Line
Vendor
WAGO
Product
Touch Panel 600 Marine Line
Platforms
Unknown
Default status
unaffected
Touch Panel 600 Marine Line · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
semver
Unavailable
FW26
None listed
Touch Panel 600 Standard Line
Vendor
WAGO
Product
Touch Panel 600 Standard Line
Platforms
Unknown
Default status
unaffected
Touch Panel 600 Standard Line · Scoped product and version facts