CVE-2023-4149

9.8 criticalEPSS 1.1%

Critical (9.8) in wago. EPSS 1.1% chance of exploitation in the next 30 days.

A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those commands are executed with root privileges. The vulnerability is located in the user request handling of the web-based management.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2023-11-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wago:0852-0602_firmware
wago:0852-0603_firmware
wago:0852-1605_firmware

References

https://cert.vde.com/en/advisories/VDE-2023-037
https://cert.vde.com/en/advisories/VDE-2023-037

Check your stack JSON