EUVD-2018-4930

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Weak permissions on WAGO e!DISPLAY allow authenticated user to overwrite critical files via WBM.

Reporter	Title	Published	Views	Family All 11
0day.today	WAGO e!DISPLAY 7300T XSS / File Upload / Code Execution Vulnerabilities	12 Jul 201800:00	–	zdt
Circl	CVE-2018-12979	13 Jul 201800:00	–	circl
CVE	CVE-2018-12979	12 Jul 201818:00	–	cve
Cvelist	CVE-2018-12979	12 Jul 201818:00	–	cvelist
Exploit DB	WAGO e!DISPLAY 7300T - Multiple Vulnerabilities	13 Jul 201800:00	–	exploitdb
exploitpack	WAGO e!DISPLAY 7300T - Multiple Vulnerabilities	13 Jul 201800:00	–	exploitpack
ICS	WAGO e!DISPLAY Web-Based-Management	17 Jul 201800:00	–	ics
NVD	CVE-2018-12979	12 Jul 201818:29	–	nvd
Packet Storm	WAGO e!DISPLAY 7300T XSS / File Upload / Code Execution	11 Jul 201800:00	–	packetstorm
Prion	Unrestricted file upload	12 Jul 201818:29	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "55623dfd-105a-36c2-8a0f-4f2084a5a388",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "3b30d399-4620-3a8f-8c97-cd5632cc0e9e",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2018-12979
cert	www.cert.vde.com/en-us/advisories/vde-2018-010
sec-consult	www.sec-consult.com/en/blog/advisories/remote-code-execution-via-multiple-attack-vectors-in-wago-edisplay/
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-198-02
wago	www.wago.com/medias/SA-WBM-2018-004.pdf
exploit-db	www.exploit-db.com/exploits/45014/
seclists	www.seclists.org/fulldisclosure/2018/Jul/38
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.5

CVSS 25.5

EPSS0.04881