What’s Vulnerable › Vulnerabilities

CVE-2023-4149: WAGO: OS Command Injection Vulnerability in Managed Switch

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-21 · updated 2026-06-17
• Weakness: CWE-78

Description

A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those commands are executed with root privileges. The vulnerability is located in the user request handling of the web-based management.

Affected products

• WAGO 0852-0602 Firmware: before 1.0.6.s0 — fixed in 1.0.6.s0
• WAGO 0852-0603 Firmware: before 1.0.6.s0 — fixed in 1.0.6.s0
• WAGO 0852-1605 Firmware: before 1.2.5.s0 — fixed in 1.2.5.s0

How to fix

Upgrade to a fixed version: WAGO 0852-0602 Firmware 1.0.6.s0; WAGO 0852-0603 Firmware 1.0.6.s0; WAGO 0852-1605 Firmware 1.2.5.s0. Check the vendor advisory for mitigations.

References

• https://cert.vde.com/en/advisories/VDE-2023-037
• https://cert.vde.com/en/advisories/VDE-2023-037

Get alerted when CVE-2023-4149 or the next vulnerability affects your stack