CVE-2023-4089CWE-610

WAGO: Multiple products vulnerable to local file inclusion

Low · published October 17, 2023

CVSS v3.1
2.7
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.5th percentile
Weakness
CWE-610 · Externally Controlled Reference to a Resource in Another Sphere
Published
2023-10-17T06:00Z
EPSS history
Timeline
  • 17 OCT 06:00Z
    WAGO: Multiple products vulnerable to local file inclusion
    cvelistv5