VDE-2022-054 — WAGO: Unauthenticated Configuration Export in web-based management in multiple devices

Summary

A vulnerability in the web-based management (WBM) of WAGOs programmable logic controller (PLC) could allow an unauthenticated remote attacker to retrieve sensitive information.

Details

Impact
The vulnerability allows a remote, unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull.

Remediation
Install FW22 Patch 1

Vulnerabilities 1

Medium 5.9

CVE-2022-3738

WAGO: Missing authentication for config export functionality in multiple products

The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot fo…

WAGO Series WAGO Touch Panel 600 Standard Line WAGO Edge Controller Series WAGO PFC200 Browsers ICS / OT

Jan 19, 2023

Revision history

2023-01-12 #1
Initial revision.

References

VDE-2022-054: WAGO: Unauthenticated Configuration Export in web-based management in multiple devices - HTML
https://certvde.com/en/advisories/VDE-2022-054/
WAGO PSIRT
https://www.wago.com/psirt
CERT@VDE Security Advisories for WAGO GmbH & Co. KG
https://certvde.com/en/advisories/vendor/wago/