Vulnerability Intelligence Report
WAGO: Multiple products vulnerable to local file inclusion
CVE-2023-4089
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.
No Active Exploit Signals
CVSS Base Score
2.7
LOW
Exploitability:1.3
Impact Score:1.5
EPSS Probability:0.47%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| No affected products specified. | ||
Threat Intelligence Signals
EPSS Score
0.470%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | CERT@VDE · CERT · Germany |
| Reserved | 2023-08-02T07:20:35 |
| Published | 2023-10-17T06:00:28 |
| Last Updated | 2025-02-27T20:40:32 |
Community Chatter & Buzz