On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.
| Software | From | Fixed in |
|---|---|---|
| wago / compact_controller_100_firmware | 19 | 26.x |
| wago / edge_controller_firmware | 18 | 26.x |
| wago / pfc100_firmware | 16 | 26.x |
| wago / pfc200_firmware | 16 | 26.x |
| wago / touch_panel_600_advanced_firmware | 16 | 26.x |
| wago / touch_panel_600_marine_firmware | 16 | 26.x |
| wago / touch_panel_600_standard_firmware | 16 | 26.x |