Externally Controlled Reference to a Resource in Another Sphere in WAGO products - CVE-2023-4089

Vulnerability identifier: #VU83406

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-4089

CWE-ID: CWE-610

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to compromise the target system.

The vulnerability exists due to the affected software uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere. A remote administrator can access files which they already have access to through an undocumented local file inclusion.

Compact Controller CC100
Edge Controller
Touch Panel 600 Standard Line
PFC100
PFC200
Touch Panel 600 Marine Line
Touch Panel 600 Advanced Line

Install updates from vendor's website.

Compact Controller CC100 - update to FW27
Edge Controller - update to FW27
Touch Panel 600 Standard Line - update to FW27
PFC100 - update to FW27
PFC200 - update to FW27
Touch Panel 600 Marine Line - update to FW27
Touch Panel 600 Advanced Line - update to FW27

• https://cert.vde.com/en/advisories/VDE-2023-046/

• Externally Controlled Reference to a Resource in Another Sphere in WAGO PFC200 Series