CVE-2023-4149

A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those commands are executed with root privileges. The vulnerability is located in the user request handling of the web-based management.
CVSS

No CVSS.

References
Link Resource
https://cert.vde.com/en/advisories/VDE-2023-037 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:wago:0852-0602_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:wago:0852-0602:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:wago:0852-0603_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:wago:0852-0603:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:wago:0852-1605_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:wago:0852-1605:-:*:*:*:*:*:*:*

Information

Published : 2023-11-21 07:15

Updated : 2023-11-29 17:09


NVD link : CVE-2023-4149

Mitre link : CVE-2023-4149


JSON object : View

Products Affected

wago

  • 0852-1605_firmware
  • 0852-0602
  • 0852-0603
  • 0852-0602_firmware
  • 0852-0603_firmware
  • 0852-1605
CWE

No CWE.