Wago Tp600 vulnerabilities

1 known vulnerability affecting wago/tp600.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2024-1490HIGHCVSS 7.2≥ 0.0.0, ≤ FW 26v0.0.02026-04-09

CVE-2024-1490 [HIGH] CWE-94 CVE-2024-1490: An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.