Skip to content
OpenAdvisories
Medium VDE-2023-045 1 CVE

Wago: Vulnerability in Smart Designer Web-Application

Published Dec 5, 2023 · Updated Dec 5, 2023

Summary

An attacker with privileges can enumerate projects and usernames through an iterative process, by making a request to a specific endpoint.

Details

Impact
The vulnerability might result in disclosure of sensitive information.

Remediation
A patch for the WAGO Smart Designer will be available with version 2.34.

Vulnerabilities 1

  • Medium 4.3
    CVE-2023-5872

    Wago: Vulnerability in Smart Designer Web-Application

    In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requests to an specific endpoint.

    WAGO Smart Designer ICS / OT

Revision history

  1. #1

    Initial revision.

References