Skip to content
Fencer Vulns
low 2.7

CVE-2023-4089 json

WAGO: Multiple products vulnerable to local file inclusion

published 2023-10-17 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-53979

cvss
2.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 50%
public exploits
0
none known

Summary

On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-23-325-01 updated cvss 2.7

WAGO PFC200 Series

  • WAGO Compact Controller CC100 >FW19_up_to_and_including_FW26 WAGO Edge Controller >FW18_up_to_and_including_FW26 WAGO PFC100 >FW16_up_to_and_including_FW26 WAGO PFC200 >FW16_up_to_and_including_FW26 WAGO Touch Panel 600 Advanced Line >FW16_up_to_and_including_FW26 WAGO Touch Panel 600 Marine Line >FW16_up_to_and_including_FW26
    +1 more products
    WAGO Touch Panel 600 Standard Line >FW16_up_to_and_including_FW26
    affected: mitigation “As general security measures strongly WAGO recommends:” cert.vde.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
20 mo ago

Exploit prediction

0.63% chance of exploitation in the next 30 days, higher than 50% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Affected products

  • WAGO Compact Controller CC100
  • WAGO Edge Controller
  • WAGO PFC100
  • WAGO PFC200
  • WAGO Touch Panel 600 Advanced Line
  • WAGO Touch Panel 600 Marine Line
  • WAGO Touch Panel 600 Standard Line

Classification

Weakness
  • CWE-610 Externally Controlled Reference to a Resource in Another Sphere

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.