VDE-2023-037 — WAGO: Remote Code execution vulnerability in managed Switches

Summary

Affected products are vulnerable to remote code execution via command injection in the web-based management by an attacker.

Details

Impact
An unprivileged attacker can fully compromise the system and access all files.

Mitigation
Restrict network access to the device.
Do not directly connect the device to the internet.

Remediation
WAGO recommends all affected users of products 0852-0602, 0852-0603 to update to firmware version 1.0.6.S0 and all affected users of 852-1605 to update to firmware version 1.2.5.S0.

Vulnerabilities 1

Critical 9.8

CVE-2023-4149

WAGO: OS Command Injection Vulnerability in Managed Switch

A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those commands are executed with root privileges. The vulnerability is located in the user request handling…

WAGO Industrial Managed Switch (0852-0602) Industrial Managed Switch (0852-1605) Industrial Managed Switch (0852-0603) ICS / OT

Nov 21, 2023

Revision history

2023-11-21 #1
Initial revision.

References

VDE-2023-037: WAGO: Remote Code execution vulnerability in managed Switches - HTML
https://certvde.com/en/advisories/VDE-2023-037/
WAGO PSIRT
https://www.wago.com/psirt
CERT@VDE Security Advisories for WAGO GmbH & Co. KG
https://certvde.com/en/advisories/vendor/wago/