WAGO: Multiple vulnerabilities in docker configuration

Summary

Details

Vulnerabilities 8

• High 8.8
  CVE-2024-41969

  WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple Devices

  A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS.

  WAGO TP600 0762-420x/8000-000x TP600 0762-520x/8000-000x CC100 0751-9x01 Browsers ICS / OT
  Nov 18, 2024
• High 8.1
  CVE-2024-41967

  WAGO: Boot Mode Manipulation in Multiple Devices

  A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of the firmware upgrade process or a denial-of-service attack.

  WAGO TP600 0762-430x/8000-000x Edge Controller 0752-8303/8000-0002 TP600 0762-530x/8000-000x Browsers ICS / OT
  Nov 18, 2024
• High 8.1
  CVE-2024-41971

  WAGO: Arbitrary File Overwrite in Multiple Devices

  A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss.

  WAGO TP600 0762-520x/8000-000x TP600 0762-620x/8000-000x CC100 0751-9x01 Browsers ICS / OT
  Nov 18, 2024
• High 8.1
  CVE-2024-41973

  WAGO: Remote Arbitrary File Write with Root Privileges in multiple Devices

  A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.

  WAGO TP600 0762-420x/8000-000x TP600 0762-520x/8000-000x TP600 0762-620x/8000-000x Browsers ICS / OT
  Nov 18, 2024
• High 7.1
  CVE-2024-41974

  WAGO: BACNet Service Property Modification Due to Permission Misconfiguration in Multiple Devices

  A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources which may lead to a DoS limited to BACNet communication.

  WAGO Edge Controller 0752-8303/8000-0002 TP600 0762-630x/8000-000x PFC100 G2 0750-811x-xxxx-xxxx Browsers ICS / OT
  Nov 18, 2024
• Medium 6.5
  CVE-2024-41972

  WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices

  A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges.

  WAGO TP600 0762-420x/8000-000x TP600 0762-520x/8000-000x TP600 0762-620x/8000-000x Browsers ICS / OT
  Nov 18, 2024
• Medium 5.7
  CVE-2024-41970

  WAGO: Unauthorized Diagnostic Data Exposure in Multiple Devices

  A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources.

  WAGO TP600 0762-620x/8000-000x CC100 0751-9x01 TP600 0762-430x/8000-000x Browsers ICS / OT
  Nov 18, 2024
• Medium 5.4
  CVE-2024-41968

  WAGO: Docker Settings Manipulation in Multiple Devices

  A low privileged remote attacker may modify the docker settings setup of the device, leading to a limited DoS.

  WAGO CC100 0751-9x01 TP600 0762-620x/8000-000x PFC100 G2 0750-811x-xxxx-xxxx Browsers ICS / OT
  Nov 18, 2024

Revision history

1. 2025-05-22 #4

   Fix: quotation mark

2. 2025-02-12 #3

   Fix: corrected self-reference, fixed version

3. 2025-01-30 #2

   Added known mitigations as remediation. Added the Custom Firmware to the product branch. Added firmware 3.10.11 (Firmware 22 Patch 2) to the fixed products. This version was in revision 1 listed as vulnerable.

4. 2024-11-18 #1

   Initial document.

References

• WAGO PSIRT
  https://www.wago.com/de-en/automation-technology/psirt
• CERT@VDE Security Advisories for WAGO
  https://certvde.com/de/advisories/vendor/wago/
• VDE-2024-047: WAGO: Multiple vulnerabilities in docker configuration - HTML
  https://certvde.com/en/advisories/VDE-2024-047