CVE-2024-41969
High
Description
A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS.
SeverityHigh
CVSS8.8
Exploit probability—
ProductCC100 0751-9x01
PublishedNov 18, 2024
First seenNov 18, 2024
Weakness typeCWE-306Missing authentication for critical function
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WAGO CC100 0751-9x01 | v ≤ 4.5.10 (FW27) | — |
| WAGO PFC100 G2 0750-811x-xxxx-xxxx | v ≤ 4.5.10 (FW27) | — |
| WAGO PFC200 G2 750-821x-xxx-xxx | v ≤ 4.5.10 (FW27) | — |
| WAGO TP600 0762-420x/8000-000x | v ≤ 4.5.10 (FW27) | — |
| WAGO TP600 0762-430x/8000-000x | v ≤ 4.5.10 (FW27) | — |
| WAGO TP600 0762-520x/8000-000x | v ≤ 4.5.10 (FW27) | — |
| WAGO TP600 0762-530x/8000-000x | v ≤ 4.5.10 (FW27) | — |
| WAGO TP600 0762-620x/8000-000x | v ≤ 4.5.10 (FW27) | — |
| WAGO TP600 0762-630x/8000-000x | v ≤ 4.5.10 (FW27) | — |
| WAGO Edge Controller 0752-8303/8000-0002 | v ≤ 4.5.10 (FW27) | — |
| WAGO PFC100 G1 0750-810x/xxxx-xxxx | v ≤ 3.10.10 (FW22 Patch 1) | — |
| WAGO PFC200 G1 750-820x-xxx-xxx | v ≤ 3.10.10 (FW22 Patch 1) | — |
| WAGO PFC200 G1 0750-820x/xxx-xxx | v ≤ 03.03.08 (80) | — |
| WAGO PFC200 G2 0750-821x/xxx-xxx | v ≤ 04.04.03 (70) | — |
| WAGO CC100 0751/9x01 | v ≤ 04.03.03 (72), v ≤ 04.04.03 (70) | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.