CVE-2023-1698
WAGO: WBM Command Injection in multiple products
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
4
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.
*Credits:
Quentin Kaiser from ONEKEY
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-03-29 CVE Reserved
- 2023-05-15 CVE Published
- 2023-09-10 First Exploit
- 2024-08-02 CVE Updated
- 2024-11-22 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
- CAPEC-88: OS Command Injection
References (5)
URL | Tag | Source |
---|---|---|
https://cert.vde.com/en/advisories/VDE-2023-007 | Third Party Advisory |
URL | Date | SRC |
---|---|---|
https://github.com/codeb0ss/CVE-2023-1698-PoC | 2023-09-10 | |
https://github.com/Chocapikk/CVE-2023-1698 | 2023-09-15 | |
https://github.com/thedarknessdied/WAGO-CVE-2023-1698 | 2023-10-20 | |
https://github.com/deIndra/CVE-2023-1698 | 2023-10-20 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Wago Search vendor "Wago" | Compact Controller 100 Firmware Search vendor "Wago" for product "Compact Controller 100 Firmware" | >= 20 <= 23 Search vendor "Wago" for product "Compact Controller 100 Firmware" and version " >= 20 <= 23" | - |
Affected
| in | Wago Search vendor "Wago" | Compact Controller 100 Search vendor "Wago" for product "Compact Controller 100" | - | - |
Safe
|
Wago Search vendor "Wago" | Edge Controller Firmware Search vendor "Wago" for product "Edge Controller Firmware" | 22 Search vendor "Wago" for product "Edge Controller Firmware" and version "22" | - |
Affected
| in | Wago Search vendor "Wago" | Edge Controller Search vendor "Wago" for product "Edge Controller" | - | - |
Safe
|
Wago Search vendor "Wago" | Pfc100 Firmware Search vendor "Wago" for product "Pfc100 Firmware" | >= 20 <= 23 Search vendor "Wago" for product "Pfc100 Firmware" and version " >= 20 <= 23" | - |
Affected
| in | Wago Search vendor "Wago" | Pfc100 Search vendor "Wago" for product "Pfc100" | - | - |
Safe
|
Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | >= 20 <= 23 Search vendor "Wago" for product "Pfc200 Firmware" and version " >= 20 <= 23" | - |
Affected
| in | Wago Search vendor "Wago" | Pfc200 Search vendor "Wago" for product "Pfc200" | - | - |
Safe
|
Wago Search vendor "Wago" | Touch Panel 600 Advanced Firmware Search vendor "Wago" for product "Touch Panel 600 Advanced Firmware" | 22 Search vendor "Wago" for product "Touch Panel 600 Advanced Firmware" and version "22" | - |
Affected
| in | Wago Search vendor "Wago" | Touch Panel 600 Advanced Search vendor "Wago" for product "Touch Panel 600 Advanced" | - | - |
Safe
|
Wago Search vendor "Wago" | Touch Panel 600 Marine Firmware Search vendor "Wago" for product "Touch Panel 600 Marine Firmware" | 22 Search vendor "Wago" for product "Touch Panel 600 Marine Firmware" and version "22" | - |
Affected
| in | Wago Search vendor "Wago" | Touch Panel 600 Marine Search vendor "Wago" for product "Touch Panel 600 Marine" | - | - |
Safe
|
Wago Search vendor "Wago" | Touch Panel 600 Standard Firmware Search vendor "Wago" for product "Touch Panel 600 Standard Firmware" | 22 Search vendor "Wago" for product "Touch Panel 600 Standard Firmware" and version "22" | - |
Affected
| in | Wago Search vendor "Wago" | Touch Panel 600 Standard Search vendor "Wago" for product "Touch Panel 600 Standard" | - | - |
Safe
|