PT-2023-6373 · Wago · Wago

Floris Hendriks + 1 · Published 2023-10-16 · Updated 2023-10-24 · CVE-2023-4089

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Wago products (affected versions not specified)

Description The issue allows a remote attacker with administrative privileges to access files through an undocumented local file inclusion. This access is logged in a different log file than expected. The vulnerability is related to errors in processing hypertext links and can allow an attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-610

Related Identifiers

BDU:2023-07085

CVE-2023-4089

Affected Products

Wago

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-4089 · Security Note
• https://bdu.fstec.ru/vul/2023-07085 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4089 · Vendor Advisory
• https://cert.vde.com/en/advisories/VDE-2023-046 · Note
• https://t.me/cvenotify/59593 · Telegram Post
• https://twitter.com/CVEnew/status/1714164551023759703 · Twitter Post