5.3
Medium
CVE-2023-3379 Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to…
Description
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Compact Controller 100 (751-9301) | Versions not published | |
| PFC100 (750-810x/xxx-xxx) | Versions not published | |
| PFC200 (750-820x/xxx-xxx) | Versions not published | |
| PFC200 (750-821x/xxx-xxx) | Versions not published | |
| Touch Panel 600 Advanced Line (762-5xxx) | Versions not published | |
| Touch Panel 600 Marine Line (762-6xxx) | Versions not published | |
| Touch Panel 600 Standard Line (762-4xxx) | Versions not published | |
| Edge Controller (752-8303/8000-002) | Versions not published |