Wago Edge Controller vulnerabilities
4 vulnerabilities
Known vulnerabilities in Wago Edge Controller, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-3738wagocc100_firmware+13
EPSS score0.63%
The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull.CVE-2023-1698wagocompact_controller_100_firmware+10EPSS score81.91%
In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.CVE-2023-4089wagocompact_controller_100_firmware+10EPSS score0.63%
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.CVE-2023-3379wagocompact_controller_100_firmware+14EPSS score0.20%
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges.