Summary
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates.Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks.
Details
Impact
An attacker needs an authorized login on the device in order to exploit the various configuration pages with malicious scripts. This can be used to install malicious code and to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
Mitigation
Restrict network access to the device
Use strong passwords
Do not directly connect the device to the internet
Disable unused TCP/UDP-ports
Please install upcoming FW-Update, which will be available at end of Q2/2022.
Vulnerabilities 1
-
Medium 5.4
WAGO PLCs WBM vulnerable to reflected XSS
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been co…
Revision history
-
#1
Initial revision.
References
-
VDE-2022-004: WAGO: Web-Based Management Cross-Site Scripting - HTML
https://certvde.com/en/advisories/VDE-2022-004/
-
WAGO PSIRT
https://www.wago.com/de-en/automation-technology/psirt
-
CERT@VDE Security Advisories for WAGO GmbH & Co. KG
https://certvde.com/en/advisories/vendor/wago/