PT-2023-6373 · Wago · Wago

Floris Hendriks + 1 · Publicado 2023-10-16 · Atualizado 2023-10-24 · CVE-2023-4089

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Wago products (affected versions not specified)

Description The issue allows a remote attacker with administrative privileges to access files through an undocumented local file inclusion. This access is logged in a different log file than expected. The vulnerability is related to errors in processing hypertext links and can allow an attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-610

Identificadores relacionados

BDU:2023-07085

CVE-2023-4089

Produtos afetados

Wago

Referências · 6

• https://cert.vde.com/en/advisories/VDE-2023-046 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-4089 · Nota de Segurança
• https://t.me/cvenotify/59593 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1714164551023759703 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2023-07085 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-4089 · Aviso do Fabricante