Total vulnerabilities in the database
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges.
| Software | From | Fixed in |
|---|---|---|
| wago / compact_controller_100_firmware | - | 25.x |
| wago / edge_controller_firmware | - | 25.x |
| wago / pfc100_firmware | - | 22 |
| wago / pfc100_firmware | 22-patch_1 | 22-patch_1.x |
| wago / pfc100_firmware | 22 | 22.x |
| wago / pfc200_firmware | - | 22 |
| wago / pfc200_firmware | 22-patch_1 | 22-patch_1.x |
| wago / pfc200_firmware | 22 | 22.x |
| wago / pfc200_firmware | 23 | 23.x |
| wago / pfc200_firmware | 24 | 24.x |
| wago / touch_panel_600_advanced_firmware | - | 25.x |
| wago / touch_panel_600_marine_firmware | - | 25.x |
| wago / touch_panel_600_standard_firmware | - | 25.x |