CVE-2023-4089
Last modified
CVE-2023-4089 is a low-severity vulnerability rated 2.7/10 on the CVSS scale. On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.. EPSS estimates a 0.47% chance of exploitation in the next 30 days.
Description
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wago | Compact Controller 100 Firmware | >= 19, <= 26 |
| Wago | Edge Controller Firmware | >= 18, <= 26 |
| Wago | Pfc100 Firmware | >= 16, <= 26 |
| Wago | Pfc200 Firmware | >= 16, <= 26 |
| Wago | Touch Panel 600 Advanced Firmware | >= 16, <= 26 |
| Wago | Touch Panel 600 Marine Firmware | >= 16, <= 26 |
| Wago | Touch Panel 600 Standard Firmware | >= 16, <= 26 |
References
- https://cert.vde.com/en/advisories/VDE-2023-046/Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2023-046/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-4089?
How severe is CVE-2023-4089?
How do I fix CVE-2023-4089?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-40874DedeCMS up to and including 5.7.110 was discovered to contai…5.4
- CVE-2023-40875DedeCMS up to and including 5.7.110 was discovered to contai…5.4
- CVE-2023-40876DedeCMS up to and including 5.7.110 was discovered to contai…5.4
- CVE-2023-40877DedeCMS up to and including 5.7.110 was discovered to contai…5.4
- CVE-2023-4088Incorrect Default Permissions vulnerability in Mitsubishi El…7.8
- CVE-2023-40889A heap-based buffer overflow exists in the qr_reader_match_c…9.8
- CVE-2023-40890A stack-based buffer overflow vulnerability exists in the lo…9.8
- CVE-2023-40891Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to …9.8
- CVE-2023-40892Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to …9.8
- CVE-2023-40893Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to …9.8
- CVE-2023-40894Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to …9.8
- CVE-2023-40895Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to …9.8
Are you affected by CVE-2023-4089?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST