Description
In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requests to an specific endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wago | Smart Designer | 0.0.0 – ≤ 2.33.1 | — |
Advisories 1
- VDE-2023-045 Wago: Vulnerability in Smart Designer Web-Application CERT@VDE · Dec 5, 2023