Wago Wp400 vulnerabilities

1 known vulnerability affecting wago/wp400.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2024-1490HIGHCVSS 7.2≥ 0.0.0, ≤ 4.5.102026-04-09

CVE-2024-1490 [HIGH] CWE-94 CVE-2024-1490: An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.