WAGO: Improper Privilege Management in web-based management
Priority LOW 23CWE-863Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-863.
Summary
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges.
Why it matters now
EPSS 0.00197 9th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| WAGO | Compact Controller 100 (751-9301) | up to FW25 | — | No fix listed | CNA |
| WAGO | PFC100 (750-810x/xxx-xxx) | up to FW22 Patch 1 | — | No fix listed | CNA |
| WAGO | PFC200 (750-820x/xxx-xxx) | up to FW25 | — | No fix listed | CNA |
| WAGO | PFC200 (750-821x/xxx-xxx) | up to FW22 Patch 1 | — | No fix listed | CNA |
| WAGO | Touch Panel 600 Advanced Line (762-5xxx) | up to FW25 | — | No fix listed | CNA |
| WAGO | Touch Panel 600 Marine Line (762-6xxx) | up to FW25 | — | No fix listed | CNA |
| WAGO | Touch Panel 600 Standard Line (762-4xxx) | up to FW25 | — | No fix listed | CNA |
| WAGO | Edge Controller (752-8303/8000-002) | up to FW25 | — | No fix listed | CNA |
- Compact Controller 100 (751-9301) VendorWAGO Affected up to FW25 Fixed in — No fix listed CNA
- PFC100 (750-810x/xxx-xxx) VendorWAGO Affected up to FW22 Patch 1 Fixed in — No fix listed CNA
- PFC200 (750-820x/xxx-xxx) VendorWAGO Affected up to FW25 Fixed in — No fix listed CNA
- PFC200 (750-821x/xxx-xxx) VendorWAGO Affected up to FW22 Patch 1 Fixed in — No fix listed CNA
- Touch Panel 600 Advanced Line (762-5xxx) VendorWAGO Affected up to FW25 Fixed in — No fix listed CNA
- Touch Panel 600 Marine Line (762-6xxx) VendorWAGO Affected up to FW25 Fixed in — No fix listed CNA
- Touch Panel 600 Standard Line (762-4xxx) VendorWAGO Affected up to FW25 Fixed in — No fix listed CNA
- Edge Controller (752-8303/8000-002) VendorWAGO Affected up to FW25 Fixed in — No fix listed CNA
CPE configurations NVD · 20
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wago:compact_controller_100_firmware:*:*:*:*:*:*:*:* | up to 25 | Vulnerable | WAGO |
| cpe:2.3:h:wago:compact_controller_100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:edge_controller_firmware:*:*:*:*:*:*:*:* | up to 25 | Vulnerable | WAGO |
| cpe:2.3:h:wago:edge_controller:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:pfc100_firmware:*:*:*:*:*:*:*:* | before 22 | Vulnerable | WAGO |
| cpe:2.3:o:wago:pfc100_firmware:22:-:*:*:*:*:*:* | 22 | Vulnerable | WAGO |
| cpe:2.3:o:wago:pfc100_firmware:22:patch_1:*:*:*:*:*:* | 22 patch_1 | Vulnerable | WAGO |
| cpe:2.3:h:wago:pfc100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:pfc200_firmware:*:*:*:*:*:*:*:* | before 22 | Vulnerable | WAGO |
| cpe:2.3:o:wago:pfc200_firmware:22:-:*:*:*:*:*:* | 22 | Vulnerable | WAGO |
- cpe:2.3:o:wago:compact_controller_100_firmware:*:*:*:*:*:*:*:* Versions up to 25 Vulnerable ·WAGO
- cpe:2.3:h:wago:compact_controller_100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:edge_controller_firmware:*:*:*:*:*:*:*:* Versions up to 25 Vulnerable ·WAGO
- cpe:2.3:h:wago:edge_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:pfc100_firmware:*:*:*:*:*:*:*:* Versions before 22 Vulnerable ·WAGO
- cpe:2.3:o:wago:pfc100_firmware:22:-:*:*:*:*:*:* Versions 22 Vulnerable ·WAGO
- cpe:2.3:o:wago:pfc100_firmware:22:patch_1:*:*:*:*:*:* Versions 22 patch_1 Vulnerable ·WAGO
- cpe:2.3:h:wago:pfc100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:pfc200_firmware:*:*:*:*:*:*:*:* Versions before 22 Vulnerable ·WAGO
- cpe:2.3:o:wago:pfc200_firmware:22:-:*:*:*:*:*:* Versions 22 Vulnerable ·WAGO
Show 10 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wago:pfc200_firmware:22:patch_1:*:*:*:*:*:* | 22 patch_1 | Vulnerable | WAGO |
| cpe:2.3:o:wago:pfc200_firmware:23:*:*:*:*:*:*:* | 23 | Vulnerable | WAGO |
| cpe:2.3:o:wago:pfc200_firmware:24:*:*:*:*:*:*:* | 24 | Vulnerable | WAGO |
| cpe:2.3:h:wago:pfc200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:touch_panel_600_advanced_firmware:*:*:*:*:*:*:*:* | up to 25 | Vulnerable | WAGO |
| cpe:2.3:h:wago:touch_panel_600_advanced:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:touch_panel_600_marine_firmware:*:*:*:*:*:*:*:* | up to 25 | Vulnerable | WAGO |
| cpe:2.3:h:wago:touch_panel_600_marine:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:touch_panel_600_standard_firmware:*:*:*:*:*:*:*:* | up to 25 | Vulnerable | WAGO |
| cpe:2.3:h:wago:touch_panel_600_standard:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
- cpe:2.3:o:wago:pfc200_firmware:22:patch_1:*:*:*:*:*:* Versions 22 patch_1 Vulnerable ·WAGO
- cpe:2.3:o:wago:pfc200_firmware:23:*:*:*:*:*:*:* Versions 23 Vulnerable ·WAGO
- cpe:2.3:o:wago:pfc200_firmware:24:*:*:*:*:*:*:* Versions 24 Vulnerable ·WAGO
- cpe:2.3:h:wago:pfc200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:touch_panel_600_advanced_firmware:*:*:*:*:*:*:*:* Versions up to 25 Vulnerable ·WAGO
- cpe:2.3:h:wago:touch_panel_600_advanced:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:touch_panel_600_marine_firmware:*:*:*:*:*:*:*:* Versions up to 25 Vulnerable ·WAGO
- cpe:2.3:h:wago:touch_panel_600_marine:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:touch_panel_600_standard_firmware:*:*:*:*:*:*:*:* Versions up to 25 Vulnerable ·WAGO
- cpe:2.3:h:wago:touch_panel_600_standard:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-3379
- 2026-10-03 Alias added: GHSA-29g7-9vcg-g9rm
References
More WAGO Compact Controller 100 Firmware vulnerabilities
- TI-2023-01594 WAGO: WBM Command Injection in multiple products CVSS 3.1CRITICAL 9.8
- TI-2023-03785 WAGO: Multiple products vulnerable to local file inclusion CVSS 3.1LOW 2.7
Sources
- CVE-2023-3379 · CVE Program
- CVE-2023-3379 · NVD
- FIRST EPSS
- GHSA-29g7-9vcg-g9rm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences