7.2
High
CVE-2024-1490 An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management…
Description
An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CC100 (0751-9x01) 0.0 | 0.0.0 → 4.5.10 | No fix stated |
| PFC100 G1 (0750-810-xxxx-xxxx) 0.0 | 0.0.0 → 3.10.10 | No fix stated |
| PFC100 G2 (0750-811x-xxxx-xxxx) 0.0 | 0.0.0 → 4.5.10 | No fix stated |
| PFC200 G1 (750-820x-xxxx-xxxx) 0.0 | 0.0.0 → 3.10.10 | No fix stated |
| PFC200 G2 (750-821x-xxxx-xxxx) 0.0 | 0.0.0 → 4.5.10 | No fix stated |
| TP600 (0762-420x-8000-000x) 0.0 | 0.0.0 → latest | No fix stated |
| TP600 (0762-430x-8000-000x) 0.0 | 0.0.0 → 4.5.10 | No fix stated |
| TP600 (0762-520x-8000-000x) 0.0 | 0.0.0 → 4.5.10 | No fix stated |
| TP600 (0762-530x-8000-000x) 0.0 | 0.0.0 → 4.5.10 | No fix stated |
Show the 4 other branches Hide the 4 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| TP600 (0762-620x-8000-000x) | 0.0.0 | No fix stated |
| TP600 (0762-630x-8000-000x) 0.0 | 0.0.0 → 4.5.10 | No fix stated |
| Edge Controller (0752-8303-8000-0002) 0.0 | 0.0.0 → 4.5.10 | No fix stated |
| WP400 (0762-340x) 0.0 | 0.0.0 → 4.5.10 | No fix stated |