CVE-2023-1698criticalobserved exploitationCWE-78

CVE-2023-1698: critical vulnerability in WAGO Compact Controller CC100

WAGO: WBM Command Injection in multiple products

Published · Updated

Follow this CVE+ Monitor WAGO PFC200+ Monitor PFC100

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 9.8epss 82%
from disclosure to weapon123 days
Published on NVDMay 15
1st PoC+123d
VulnCheck+203d
In short

An attacker can remotely access WAGO devices without credentials and create new users or change critical settings, potentially taking complete control of the device or making it stop working.

Technical detail

A command injection vulnerability (CWE-78) in WAGO WBM allows unauthenticated remote attackers to execute arbitrary commands through unsanitized input, enabling unauthorized user creation, configuration modification, and complete system compromise. The vulnerability requires network access but no prior authentication, resulting in CVSS 9.8 severity with impacts including DoS and full device takeover.

Summary generated and translated by AI from the official description.
In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
WAGO · Compact Controller CC100WAGO · Edge ControllerWAGO · PFC100WAGO · PFC200WAGO · Touch Panel 600 Advanced LineWAGO · Touch Panel 600 Marine LineWAGO · Touch Panel 600 Standard Line
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — WAGO Compact Controller CC100

In the same product, most dangerous first.

CVE-2022-3281HIGHWAGO: multiple products - Loss of MAC-Address-Filtering after rebootEPSS 0.8%CVE-2023-4089LOWWAGO: Multiple products vulnerable to local file inclusionEPSS 0.6%