Our takeCISA warns that two flaws in WAGO's Web-Based Management on CC100, PFC100/200 G2, TP600, Edge Controller and WP400 let an authenticated low-priv user bypass privilege checks on routing and PROFIBUS config. Patch if you run these OT devices.Security Resilience desk
Sources (2)
- cisa_advisories · cisa_advisories
- cisa_ics · cisa_ics
What this means for you — Security leader:Patch WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400 devices running vulnerable WAGO OS Linux firmware. The two privilege-escalation flaws in the Web-Based Management interface can be exploited by any authenticated low-privileged user.
What this means for you — Lean IT orgs:If you run WAGO CC100, PFC100/200, TP600, Edge Controller or WP400 industrial devices, check the firmware version and apply the vendor update as soon as you can schedule it.
What this means for you — MSP:Audit client environments for any WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller or WP400 devices and schedule the WAGO OS Linux firmware update; the two WBM privilege-bypass flaws affect low-privileged authenticated users.
What this means for you — Researcher:Two CVSS-unrated privilege-boundary bypasses in the WBM interface of multiple WAGO OS Linux devices; low-privileged authenticated users can alter routing and PROFIBUS configuration.