← Back to browse · API

CVE-2023-1698

Severity
CRITICAL
CVSS
9.8
EPSS
0.82037
Risk score
67.91
CISA KEV
No
PoC
No
Published
2023-05-15
Modified
2025-01-23
First seen
2026-08-07
Aliases
EUVD-2023-23926, GHSA-VF3G-HQQF-R379
Products
WAGO:Compact Controller CC100 FW20 ≤FW22, WAGO:Compact Controller CC100 FW23, WAGO:Edge Controller FW22, WAGO:PFC100 FW20 ≤FW22, WAGO:PFC100 FW23, WAGO:PFC200 FW20 ≤FW22, WAGO:PFC200 FW23, WAGO:Touch Panel 600 Advanced Line FW22, WAGO:Touch Panel 600 Marine Line FW22, WAGO:Touch Panel 600 Standard Line FW22
Sources
euvd EUVD-2023-23926

Description

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.

References