CVE-2023-4149

🗓️ 21 Nov 2023 07:00:25Reported by CERTVDEType

Vulnerability in web-based management allows remote command injectio

Reporter	Title	Published	Views	Family All 8
CNNVD	Security Vulnerability in WAGO Industrial Managed Switch	21 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-4149 WAGO: OS Command Injection Vulnerability in Managed Switch	21 Nov 202307:00	–	cvelist
EUVD	EUVD-2023-54029	3 Oct 202520:07	–	euvd
NVD	CVE-2023-4149	21 Nov 202307:15	–	nvd
OSV	CVE-2023-4149	21 Nov 202307:15	–	osv
Prion	Design/Logic Flaw	21 Nov 202307:15	–	prion
Positive Technologies	PT-2023-27959 · Wago · 0852-0602 Firmware +3	21 Nov 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-4149	9 Jan 202608:57	–	redhatcve

NVD

Vulners

Node

wago 0852-0602_firmwareRange<1.0.6.s0

AND

wago 0852-0602Match-

Node

wago 0852-0603_firmwareRange<1.0.6.s0

AND

wago 0852-0603Match-

Node

wago 0852-1605_firmwareRange<1.2.5.s0

AND

wago 0852-1605Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "Industrial Managed Switch (0852-0602)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "1.0.6.S0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Industrial Managed Switch (0852-0603)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "1.0.6.S0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Industrial Managed Switch (0852-1605)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "1.2.5.S0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2023-037

21 Nov 2024 08:34Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.00324

CWE-78