CVE-2024-41970
Medium
Description
A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources.
SeverityMedium
CVSS5.7
Exploit probability—
ProductCC100 0751-9x01
PublishedNov 18, 2024
First seenNov 18, 2024
Weakness typeCWE-732CWE-732
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WAGO CC100 0751-9x01 | v ≤ 4.5.10 (FW27) | — |
| WAGO PFC100 G2 0750-811x-xxxx-xxxx | v ≤ 4.5.10 (FW27) | — |
| WAGO PFC200 G2 750-821x-xxx-xxx | v ≤ 4.5.10 (FW27) | — |
| WAGO TP600 0762-420x/8000-000x | v ≤ 4.5.10 (FW27) | — |
| WAGO TP600 0762-430x/8000-000x | v ≤ 4.5.10 (FW27) | — |
| WAGO TP600 0762-520x/8000-000x | v ≤ 4.5.10 (FW27) | — |
| WAGO TP600 0762-530x/8000-000x | v ≤ 4.5.10 (FW27) | — |
| WAGO TP600 0762-620x/8000-000x | v ≤ 4.5.10 (FW27) | — |
| WAGO TP600 0762-630x/8000-000x | v ≤ 4.5.10 (FW27) | — |
| WAGO Edge Controller 0752-8303/8000-0002 | v ≤ 4.5.10 (FW27) | — |
| WAGO PFC200 G2 0750-821x/xxx-xxx | v ≤ 04.04.03 (70) | — |
| WAGO CC100 0751/9x01 | v ≤ 04.03.03 (72), v ≤ 04.04.03 (70) | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.