ICSA-26-293-02
Vulnerability from csaf_cisa - Published: 2026-10-20 06:00 - Updated: 2026-10-20 06:00Summary
WAGO OS Linux
Severity
High
Notes
Summary: Two vulnerabilities in the Web-Based Management (WBM) interface of WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400 devices allow an authenticated low-privileged user to bypass intended privilege boundaries. The issues affect both the routing configuration functionality and the authorization model for PROFIBUS configuration management.
Impact: Successful exploitation of CVE-2026-80466 may allow a low-privileged attacker to execute commands with root privileges.
CVE-2026-88850 allows a low-privileged attacker to perform unauthorized modifications of protected PROFIBUS configuration parameters.
Remediation: Update to Firmware version 4.10.0 (FW32) or higher. For the latest custom Firmware please contact the WAGO support.
Legal Notice and Terms of Use: This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).
Advisory Conversion Disclaimer: This ICSA is a verbatim republication of WAGO GmbH & Co. KG VDE-2026-096 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact WAGO GmbH & Co. KG directly for any questions regarding this advisory.
Recommended Practices: CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability. Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolate them from business networks. When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
Critical infrastructure sectors: Chemical, Critical Manufacturing, Commercial Facilities, Energy, Transportation Systems, Water and Wastewater Systems
Countries/areas deployed: Worldwide
Company headquarters location: Germany
A vulnerability in the Web-Based Management (WBM) routing configuration allows a low-privileged remote attacker to inject shell commands into routing parameters. Due to insufficient input validation, these values are stored in a configuration file and later processed by a privileged root helper script.
8.8 (High)
Vendor Fix
Update to Firmware version 4.10.0 (FW32) or higher. For the latest custom Firmware please contact the WAGO support.
Affected products
Fixed
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0027 | — | ||
| Unresolved product id: CSAFPID-0028 | — | ||
| Unresolved product id: CSAFPID-0029 | — | ||
| Unresolved product id: CSAFPID-0030 | — | ||
| Unresolved product id: CSAFPID-0031 | — | ||
| Unresolved product id: CSAFPID-0032 | — | ||
| Unresolved product id: CSAFPID-0033 | — | ||
| Unresolved product id: CSAFPID-0034 | — | ||
| Unresolved product id: CSAFPID-0035 | — | ||
| Unresolved product id: CSAFPID-0036 | — | ||
| Unresolved product id: CSAFPID-0037 | — | ||
| Unresolved product id: CSAFPID-0049 | — | ||
| Unresolved product id: CSAFPID-0050 | — | ||
| Unresolved product id: CSAFPID-0051 | — | ||
| Unresolved product id: CSAFPID-0052 | — | ||
| Unresolved product id: CSAFPID-0053 | — | ||
| Unresolved product id: CSAFPID-0054 | — | ||
| Unresolved product id: CSAFPID-0055 | — | ||
| Unresolved product id: CSAFPID-0056 | — | ||
| Unresolved product id: CSAFPID-0057 | — | ||
| Unresolved product id: CSAFPID-0058 | — | ||
| Unresolved product id: CSAFPID-0059 | — |
Known affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0016 | — | ||
| Unresolved product id: CSAFPID-0017 | — | ||
| Unresolved product id: CSAFPID-0018 | — | ||
| Unresolved product id: CSAFPID-0019 | — | ||
| Unresolved product id: CSAFPID-0020 | — | ||
| Unresolved product id: CSAFPID-0021 | — | ||
| Unresolved product id: CSAFPID-0022 | — | ||
| Unresolved product id: CSAFPID-0023 | — | ||
| Unresolved product id: CSAFPID-0024 | — | ||
| Unresolved product id: CSAFPID-0025 | — | ||
| Unresolved product id: CSAFPID-0026 | — | ||
| Unresolved product id: CSAFPID-0038 | — | ||
| Unresolved product id: CSAFPID-0039 | — | ||
| Unresolved product id: CSAFPID-0040 | — | ||
| Unresolved product id: CSAFPID-0041 | — | ||
| Unresolved product id: CSAFPID-0042 | — | ||
| Unresolved product id: CSAFPID-0043 | — | ||
| Unresolved product id: CSAFPID-0044 | — | ||
| Unresolved product id: CSAFPID-0045 | — | ||
| Unresolved product id: CSAFPID-0046 | — | ||
| Unresolved product id: CSAFPID-0047 | — | ||
| Unresolved product id: CSAFPID-0048 | — |
The Web-Based Management (WBM) authorization model does not properly enforce permissions for all PROFIBUS configuration operations. A low-privileged remote attacker can abuse an exposed configuration function to modify root-owned PROFIBUS parameters, including device addressing and SSA settings. This allows unauthorized changes to fieldbus-related configuration and violates the intended privilege boundaries within the management interface.
8.1 (High)
Vendor Fix
Update to Firmware version 4.10.0 (FW32) or higher. For the latest custom Firmware please contact the WAGO support.
Affected products
Fixed
22 products, the same list as for
CVE-2026-80466
Known affected
22 products, the same list as for
CVE-2026-80466
References
18 references
Acknowledgments
{
"document": {
"acknowledgments": [
{
"organization": "CERT@VDE",
"summary": " coordinated with WAGO.",
"urls": [
"https://certvde.com"
]
},
{
"names": [
"Ievgen Bondarenko"
],
"summary": " reported these vulnerabilities to CISA."
}
],
"aggregate_severity": {
"namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
"text": "High"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage"
}
},
"lang": "en-GB",
"notes": [
{
"category": "summary",
"text": "Two vulnerabilities in the Web-Based Management (WBM) interface of WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400 devices allow an authenticated low-privileged user to bypass intended privilege boundaries. The issues affect both the routing configuration functionality and the authorization model for PROFIBUS configuration management.",
"title": "Summary"
},
{
"category": "description",
"text": "Successful exploitation of CVE-2026-80466 may allow a low-privileged attacker to execute commands with root privileges.\n\nCVE-2026-88850 allows a low-privileged attacker to perform unauthorized modifications of protected PROFIBUS configuration parameters.",
"title": "Impact"
},
{
"category": "description",
"text": "Update to Firmware version 4.10.0 (FW32) or higher. For the latest custom Firmware please contact the WAGO support.",
"title": "Remediation"
},
{
"category": "legal_disclaimer",
"text": "This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy \u0026 Use policy (https://www.cisa.gov/privacy-policy).",
"title": "Legal Notice and Terms of Use"
},
{
"category": "other",
"text": "This ICSA is a verbatim republication of WAGO GmbH \u0026 Co. KG VDE-2026-096 from a direct conversion of the vendor\u0027s Common Security Advisory Framework (CSAF) advisory. This is republished to CISA\u0027s website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact WAGO GmbH \u0026 Co. KG directly for any questions regarding this advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability. Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolate them from business networks. When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
},
{
"category": "other",
"text": "Chemical, Critical Manufacturing, Commercial Facilities, Energy, Transportation Systems, Water and Wastewater Systems",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "VDE-2026-096: WAGO: Improper Authorization and Privilege Escalation - CSAF",
"url": "https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-096.json"
},
{
"category": "external",
"summary": "CERT@VDE Security Advisories for WAGO",
"url": "https://certvde.com/de/advisories/vendor/wago/"
},
{
"category": "self",
"summary": "VDE-2026-096: WAGO: Improper Authorization and Privilege Escalation - HTML",
"url": "https://certvde.com/en/advisories/VDE-2026-096"
},
{
"category": "self",
"summary": "WAGO PSIRT",
"url": "https://www.wago.com/de-en/automation-technology/psirt"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-26-293-02 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-293-02.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-26-293-02 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-293-02"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b"
}
],
"title": "WAGO OS Linux",
"tracking": {
"aliases": [
"VDE-2026-096"
],
"current_release_date": "2026-10-20T06:00:00.000000Z",
"generator": {
"date": "2026-10-19T18:01:10.011653Z",
"engine": {
"name": "CISA CSAF Generator",
"version": "1.5.0"
}
},
"id": "ICSA-26-293-02",
"initial_release_date": "2026-10-20T06:00:00.000000Z",
"revision_history": [
{
"date": "2026-10-20T06:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "Release version."
},
{
"date": "2026-10-20T06:00:00.000000Z",
"legacy_version": "CISA Republication",
"number": "2",
"summary": "Initial CISA Republication of WAGO GmbH \u0026 Co. KG VDE-2026-096 advisory"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "0751-9x01",
"product": {
"name": "CC100 0751-9x01",
"product_id": "CSAFPID-0001",
"product_identification_helper": {
"model_numbers": [
"0751-9?01"
]
}
}
}
],
"category": "product_family",
"name": "CC100"
},
{
"branches": [
{
"category": "product_name",
"name": "0750-811x-xxxx-xxxx",
"product": {
"name": "PFC100 G2 0750-811x-xxxx-xxxx",
"product_id": "CSAFPID-0002",
"product_identification_helper": {
"model_numbers": [
"0750-811?-????-????"
]
}
}
}
],
"category": "product_family",
"name": "PFC100 G2"
},
{
"branches": [
{
"category": "product_name",
"name": "0750-821x-xxx-xxx",
"product": {
"name": "PFC200 G2 0750-821x-xxx-xxx",
"product_id": "CSAFPID-0003",
"product_identification_helper": {
"model_numbers": [
"0750-821?-????-????"
]
}
}
}
],
"category": "product_family",
"name": "PFC200 G2"
},
{
"branches": [
{
"category": "product_name",
"name": "0762-420x-8000-000x",
"product": {
"name": "TP600 0762-420x-8000-000x",
"product_id": "CSAFPID-0004",
"product_identification_helper": {
"model_numbers": [
"0762-420?-8000-000?"
]
}
}
},
{
"category": "product_name",
"name": "0762-430x-8000-000x",
"product": {
"name": "TP600 0762-430x-8000-000x",
"product_id": "CSAFPID-0005",
"product_identification_helper": {
"model_numbers": [
"0762-430?-8000-000?"
]
}
}
},
{
"category": "product_name",
"name": "0762-520x-8000-000x",
"product": {
"name": "TP600 0762-520x-8000-000x",
"product_id": "CSAFPID-0006",
"product_identification_helper": {
"model_numbers": [
"0762-520?-8000-000?"
]
}
}
},
{
"category": "product_name",
"name": "0762-530x-8000-000x",
"product": {
"name": "TP600 0762-530x-8000-000x",
"product_id": "CSAFPID-0007",
"product_identification_helper": {
"model_numbers": [
"0762-530?-8000-000?"
]
}
}
},
{
"category": "product_name",
"name": "0762-620x-8000-000x",
"product": {
"name": "TP600 0762-620x-8000-000x",
"product_id": "CSAFPID-0008",
"product_identification_helper": {
"model_numbers": [
"0762-620?-8000-000?"
]
}
}
},
{
"category": "product_name",
"name": "0762-630x-8000-000x",
"product": {
"name": "TP600 0762-630x-8000-000x",
"product_id": "CSAFPID-0009",
"product_identification_helper": {
"model_numbers": [
"0762-630?-8000-000?"
]
}
}
}
],
"category": "product_family",
"name": "TP600"
},
{
"branches": [
{
"category": "product_name",
"name": "0752-8303-8000-0002",
"product": {
"name": "Edge Controller 0752-8303-8000-0002",
"product_id": "CSAFPID-0010",
"product_identification_helper": {
"model_numbers": [
"0752-8303-8000-0002"
]
}
}
}
],
"category": "product_family",
"name": "Edge Controller"
},
{
"branches": [
{
"category": "product_name",
"name": "0762-340x",
"product": {
"name": "WP400 0762-340x",
"product_id": "CSAFPID-0011",
"product_identification_helper": {
"model_numbers": [
"0762-340?"
]
}
}
}
],
"category": "product_family",
"name": "WP400"
}
],
"category": "product_family",
"name": "Hardware"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:semver/\u003e=1.0.0|\u003c4.10.0",
"product": {
"name": "wago_os_linux \u003c4.10.0 (FW32)",
"product_id": "CSAFPID-0012",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "4.10.0",
"product": {
"name": "wago_os_linux 4.10.0 (FW32)",
"product_id": "CSAFPID-0013",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:4.10.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:semver/\u003e=1.0.0|\u003c4.10.0_(70)",
"product": {
"name": "custom wago_os_linux \u003c4.10.0 (70)",
"product_id": "CSAFPID-0014",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "4.10.0_70",
"product": {
"name": "custom wago_os_linux 4.10.0 (70)",
"product_id": "CSAFPID-0015",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:4.10.0.70:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_family",
"name": "wago_os_linux"
}
],
"category": "product_family",
"name": "Firmware"
}
],
"category": "vendor",
"name": "WAGO"
}
],
"product_groups": [
{
"group_id": "CSAFGID-0001",
"product_ids": [
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0042",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0045",
"CSAFPID-0046",
"CSAFPID-0047",
"CSAFPID-0048"
],
"summary": "Affected products."
},
{
"group_id": "CSAFGID-0002",
"product_ids": [
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059"
],
"summary": "Fixed products."
}
],
"relationships": [
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux \u003c4.10.0 (FW32) installed on CC100 0751-9x01",
"product_id": "CSAFPID-0016",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:*:*:*:*:*:*:*:*",
"model_numbers": [
"0751-9?01"
]
}
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux \u003c4.10.0 (FW32) installed on PFC100 G2 0750-811x-xxxx-xxxx",
"product_id": "CSAFPID-0017",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:*:*:*:*:*:*:*:*",
"model_numbers": [
"0750-811?-????-????"
]
}
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0002"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux \u003c4.10.0 (FW32) installed on PFC200 G2 0750-821x-xxx-xxx",
"product_id": "CSAFPID-0018",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:*:*:*:*:*:*:*:*",
"model_numbers": [
"0750-821?-????-????"
]
}
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0003"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux \u003c4.10.0 (FW32) installed on TP600 0762-420x-8000-000x",
"product_id": "CSAFPID-0019",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-420?-8000-000?"
]
}
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0004"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux \u003c4.10.0 (FW32) installed on TP600 0762-430x-8000-000x",
"product_id": "CSAFPID-0020",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-430?-8000-000?"
]
}
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0005"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux \u003c4.10.0 (FW32) installed on TP600 0762-520x-8000-000x",
"product_id": "CSAFPID-0021",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-520?-8000-000?"
]
}
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0006"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux \u003c4.10.0 (FW32) installed on TP600 0762-530x-8000-000x",
"product_id": "CSAFPID-0022",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-530?-8000-000?"
]
}
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0007"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux \u003c4.10.0 (FW32) installed on TP600 0762-620x-8000-000x",
"product_id": "CSAFPID-0023",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-620?-8000-000?"
]
}
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0008"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux \u003c4.10.0 (FW32) installed on TP600 0762-630x-8000-000x",
"product_id": "CSAFPID-0024",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-630?-8000-000?"
]
}
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0009"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux \u003c4.10.0 (FW32) installed on Edge Controller 0752-8303-8000-0002",
"product_id": "CSAFPID-0025",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:*:*:*:*:*:*:*:*",
"model_numbers": [
"0752-8303-8000-0002"
]
}
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0010"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux \u003c4.10.0 (FW32) installed on WP400 0762-340x",
"product_id": "CSAFPID-0026",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-340?"
]
}
},
"product_reference": "CSAFPID-0012",
"relates_to_product_reference": "CSAFPID-0011"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux 4.10.0 (FW32) installed on CC100 0751-9x01",
"product_id": "CSAFPID-0027",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:4.10.0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0013",
"relates_to_product_reference": "CSAFPID-0001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux 4.10.0 (FW32) installed on PFC100 G2 0750-811x-xxxx-xxxx",
"product_id": "CSAFPID-0028",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:4.10.0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0013",
"relates_to_product_reference": "CSAFPID-0002"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux 4.10.0 (FW32) installed on PFC200 G2 0750-821x-xxx-xxx",
"product_id": "CSAFPID-0029",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:4.10.0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0013",
"relates_to_product_reference": "CSAFPID-0003"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux 4.10.0 (FW32) installed on TP600 0762-420x-8000-000x",
"product_id": "CSAFPID-0030",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:4.10.0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0013",
"relates_to_product_reference": "CSAFPID-0004"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux 4.10.0 (FW32) installed on TP600 0762-430x-8000-000x",
"product_id": "CSAFPID-0031",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:4.10.0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0013",
"relates_to_product_reference": "CSAFPID-0005"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux 4.10.0 (FW32) installed on TP600 0762-520x-8000-000x",
"product_id": "CSAFPID-0032",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:4.10.0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0013",
"relates_to_product_reference": "CSAFPID-0006"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux 4.10.0 (FW32) installed on TP600 0762-530x-8000-000x",
"product_id": "CSAFPID-0033",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:4.10.0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0013",
"relates_to_product_reference": "CSAFPID-0007"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux 4.10.0 (FW32) installed on TP600 0762-620x-8000-000x",
"product_id": "CSAFPID-0034",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:4.10.0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0013",
"relates_to_product_reference": "CSAFPID-0008"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux 4.10.0 (FW32) installed on TP600 0762-630x-8000-000x",
"product_id": "CSAFPID-0035",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:4.10.0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0013",
"relates_to_product_reference": "CSAFPID-0009"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux 4.10.0 (FW32) installed on Edge Controller 0752-8303-8000-0002",
"product_id": "CSAFPID-0036",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:4.10.0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0013",
"relates_to_product_reference": "CSAFPID-0010"
},
{
"category": "installed_on",
"full_product_name": {
"name": "wago_os_linux 4.10.0 (FW32) installed on WP400 0762-340x",
"product_id": "CSAFPID-0037",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux:4.10.0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0013",
"relates_to_product_reference": "CSAFPID-0011"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux \u003c4.10.0 (70) installed on CC100 0751-9x01",
"product_id": "CSAFPID-0038",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:*:*:*:*:*:*:*:*",
"model_numbers": [
"0751-9?01"
]
}
},
"product_reference": "CSAFPID-0014",
"relates_to_product_reference": "CSAFPID-0001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux \u003c4.10.0 (70) installed on PFC100 G2 0750-811x-xxxx-xxxx",
"product_id": "CSAFPID-0039",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:*:*:*:*:*:*:*:*",
"model_numbers": [
"0750-811?-????-????"
]
}
},
"product_reference": "CSAFPID-0014",
"relates_to_product_reference": "CSAFPID-0002"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux \u003c4.10.0 (70) installed on PFC200 G2 0750-821x-xxx-xxx",
"product_id": "CSAFPID-0040",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:*:*:*:*:*:*:*:*",
"model_numbers": [
"0750-821?-????-????"
]
}
},
"product_reference": "CSAFPID-0014",
"relates_to_product_reference": "CSAFPID-0003"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux \u003c4.10.0 (70) installed on TP600 0762-420x-8000-000x",
"product_id": "CSAFPID-0041",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-420?-8000-000?"
]
}
},
"product_reference": "CSAFPID-0014",
"relates_to_product_reference": "CSAFPID-0004"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux \u003c4.10.0 (70) installed on TP600 0762-430x-8000-000x",
"product_id": "CSAFPID-0042",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-430?-8000-000?"
]
}
},
"product_reference": "CSAFPID-0014",
"relates_to_product_reference": "CSAFPID-0005"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux \u003c4.10.0 (70) installed on TP600 0762-520x-8000-000x",
"product_id": "CSAFPID-0043",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-520?-8000-000?"
]
}
},
"product_reference": "CSAFPID-0014",
"relates_to_product_reference": "CSAFPID-0006"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux \u003c4.10.0 (70) installed on TP600 0762-530x-8000-000x",
"product_id": "CSAFPID-0044",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-530?-8000-000?"
]
}
},
"product_reference": "CSAFPID-0014",
"relates_to_product_reference": "CSAFPID-0007"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux \u003c4.10.0 (70) installed on TP600 0762-620x-8000-000x",
"product_id": "CSAFPID-0045",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-620?-8000-000?"
]
}
},
"product_reference": "CSAFPID-0014",
"relates_to_product_reference": "CSAFPID-0008"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux \u003c4.10.0 (70) installed on TP600 0762-630x-8000-000x",
"product_id": "CSAFPID-0046",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-630?-8000-000?"
]
}
},
"product_reference": "CSAFPID-0014",
"relates_to_product_reference": "CSAFPID-0009"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux \u003c4.10.0 (70) installed on Edge Controller 0752-8303-8000-0002",
"product_id": "CSAFPID-0047",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:*:*:*:*:*:*:*:*",
"model_numbers": [
"0752-8303-8000-0002"
]
}
},
"product_reference": "CSAFPID-0014",
"relates_to_product_reference": "CSAFPID-0010"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux \u003c4.10.0 (70) installed on WP400 0762-340x",
"product_id": "CSAFPID-0048",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:*:*:*:*:*:*:*:*",
"model_numbers": [
"0762-340?"
]
}
},
"product_reference": "CSAFPID-0014",
"relates_to_product_reference": "CSAFPID-0011"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux 4.10.0 (70) installed on CC100 0751-9x01",
"product_id": "CSAFPID-0049",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:4.10.0.70:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0015",
"relates_to_product_reference": "CSAFPID-0001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux 4.10.0 (70) installed on PFC100 G2 0750-811x-xxxx-xxxx",
"product_id": "CSAFPID-0050",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:4.10.0.70:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0015",
"relates_to_product_reference": "CSAFPID-0002"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux 4.10.0 (70) installed on PFC200 G2 0750-821x-xxx-xxx",
"product_id": "CSAFPID-0051",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:4.10.0.70:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0015",
"relates_to_product_reference": "CSAFPID-0003"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux 4.10.0 (70) installed on TP600 0762-420x-8000-000x",
"product_id": "CSAFPID-0052",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:4.10.0.70:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0015",
"relates_to_product_reference": "CSAFPID-0004"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux 4.10.0 (70) installed on TP600 0762-430x-8000-000x",
"product_id": "CSAFPID-0053",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:4.10.0.70:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0015",
"relates_to_product_reference": "CSAFPID-0005"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux 4.10.0 (70) installed on TP600 0762-520x-8000-000x",
"product_id": "CSAFPID-0054",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:4.10.0.70:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0015",
"relates_to_product_reference": "CSAFPID-0006"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux 4.10.0 (70) installed on TP600 0762-530x-8000-000x",
"product_id": "CSAFPID-0055",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:4.10.0.70:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0015",
"relates_to_product_reference": "CSAFPID-0007"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux 4.10.0 (70) installed on TP600 0762-620x-8000-000x",
"product_id": "CSAFPID-0056",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:4.10.0.70:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0015",
"relates_to_product_reference": "CSAFPID-0008"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux 4.10.0 (70) installed on TP600 0762-630x-8000-000x",
"product_id": "CSAFPID-0057",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:4.10.0.70:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0015",
"relates_to_product_reference": "CSAFPID-0009"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux 4.10.0 (70) installed on Edge Controller 0752-8303-8000-0002",
"product_id": "CSAFPID-0058",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:4.10.0.70:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0015",
"relates_to_product_reference": "CSAFPID-0010"
},
{
"category": "installed_on",
"full_product_name": {
"name": "custom wago_os_linux 4.10.0 (70) installed on WP400 0762-340x",
"product_id": "CSAFPID-0059",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:wago_os_linux_hardened:4.10.0.70:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0015",
"relates_to_product_reference": "CSAFPID-0011"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-80466",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "description",
"text": "A vulnerability in the Web-Based Management (WBM) routing configuration allows a low-privileged remote attacker to inject shell commands into routing parameters. Due to insufficient input validation, these values are stored in a configuration file and later processed by a privileged root helper script.",
"title": "CVE description"
}
],
"product_status": {
"fixed": [
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059"
],
"known_affected": [
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0042",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0045",
"CSAFPID-0046",
"CSAFPID-0047",
"CSAFPID-0048"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-80466"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/78.html"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to Firmware version 4.10.0 (FW32) or higher. For the latest custom Firmware please contact the WAGO support.",
"group_ids": [
"CSAFGID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 8.8,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 8.8,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0042",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0045",
"CSAFPID-0046",
"CSAFPID-0047",
"CSAFPID-0048"
]
}
],
"title": "WAGO: OS Command Injection in WBM Routing Configuration"
},
{
"cve": "CVE-2026-88850",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "description",
"text": "The Web-Based Management (WBM) authorization model does not properly enforce permissions for all PROFIBUS configuration operations. A low-privileged remote attacker can abuse an exposed configuration function to modify root-owned PROFIBUS parameters, including device addressing and SSA settings. This allows unauthorized changes to fieldbus-related configuration and violates the intended privilege boundaries within the management interface.",
"title": "CVE description"
}
],
"product_status": {
"fixed": [
"CSAFPID-0027",
"CSAFPID-0028",
"CSAFPID-0029",
"CSAFPID-0030",
"CSAFPID-0031",
"CSAFPID-0032",
"CSAFPID-0033",
"CSAFPID-0034",
"CSAFPID-0035",
"CSAFPID-0036",
"CSAFPID-0037",
"CSAFPID-0049",
"CSAFPID-0050",
"CSAFPID-0051",
"CSAFPID-0052",
"CSAFPID-0053",
"CSAFPID-0054",
"CSAFPID-0055",
"CSAFPID-0056",
"CSAFPID-0057",
"CSAFPID-0058",
"CSAFPID-0059"
],
"known_affected": [
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0042",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0045",
"CSAFPID-0046",
"CSAFPID-0047",
"CSAFPID-0048"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88850"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/862.html"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update to Firmware version 4.10.0 (FW32) or higher. For the latest custom Firmware please contact the WAGO support.",
"group_ids": [
"CSAFGID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalScore": 8.1,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 8.1,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0016",
"CSAFPID-0017",
"CSAFPID-0018",
"CSAFPID-0019",
"CSAFPID-0020",
"CSAFPID-0021",
"CSAFPID-0022",
"CSAFPID-0023",
"CSAFPID-0024",
"CSAFPID-0025",
"CSAFPID-0026",
"CSAFPID-0038",
"CSAFPID-0039",
"CSAFPID-0040",
"CSAFPID-0041",
"CSAFPID-0042",
"CSAFPID-0043",
"CSAFPID-0044",
"CSAFPID-0045",
"CSAFPID-0046",
"CSAFPID-0047",
"CSAFPID-0048"
]
}
],
"title": "WAGO: Missing Authorization for PROFIBUS Configuration in WBM"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.