What’s Vulnerable › Vulnerabilities

CVE-2023-5872: Wago: Vulnerability in Smart Designer Web-Application

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-16 · updated 2026-10-28
• Weakness: CWE-203

Description

In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requests to an specific endpoint.

Affected products

• Wago Smart Designer: through 2.33.1

References

• https://certvde.com/de/advisories/VDE-2023-045
• https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2023/vde-2023-045.json

Get alerted when CVE-2023-5872 or the next vulnerability affects your stack