CVE-2024-41969

HIGH

WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller < 4.5.10 (FW27) - Missing Authentication

Title source: llm
STIX 2.1

Description

A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS.

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0048
EPSS Percentile 37.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-306
Status published
Products (16)
WAGO/CC100 0751-9x01 0.0.0 - 4.5.10 (FW27)
WAGO/CC100 0751/9x01 0.0.0 - 04.03.03 (72)
WAGO/CC100 0751/9x01 0.0.0 - 04.04.03 (70)
WAGO/Edge Controller 0752-8303/8000-0002 0.0.0 - 4.5.10 (FW27)
WAGO/PFC100 G1 0750-810x/xxxx-xxxx 0.0.0 - 3.10.10 (FW22 Patch 1)
WAGO/PFC100 G2 0750-811x-xxxx-xxxx 0.0.0 - 4.5.10 (FW27)
WAGO/PFC200 G1 0750-820x/xxx-xxx 0.0.0 - 03.03.08 (80)
WAGO/PFC200 G1 750-820x-xxx-xxx 0.0.0 - 3.10.10 (FW22 Patch 1)
WAGO/PFC200 G2 0750-821x/xxx-xxx 0.0.0 - 04.04.03 (70)
WAGO/PFC200 G2 750-821x-xxx-xxx 0.0.0 - 4.5.10 (FW27)
... and 6 more
Published Nov 18, 2024
Tracked Since Feb 18, 2026