Wago: Vulnerability in WBM through Open VPN

7.2 CVSS

Vulnerability Description

An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-1490

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Jeroen Wijenbergh, Floris Hendriks from Radboud University

References

More from WAGO

View All →

CVE-2025-41732

Stack-based buffer overflow via unsafe sscanf in check_cookie()

Critical 9.8

CVE-2025-41730

Stack-based buffer overflow via unsafe sscanf in check_account()

Critical 9.8

CVE-2025-41716

Unauthenticated User Enumeration via Missing Authentication

Medium 5.3

CVE-2025-41715

Missing Authentication for Database Access in Web Application

Critical 9.8

CVE-2025-41713

WAGO: Vulnerability in hardware switch circuit

Medium 6.5

Affected Vendor

WAGO

View all reports →

Affected Software

CC100 (0751-9x01), PFC100 G1 (0750-810-xxxx-xxxx), PFC100 G2 (0750-811x-xxxx-xxxx), PFC200 G1 (750-820x-xxxx-xxxx), PFC200 G2 (750-821x-xxxx-xxxx), TP600 (0762-420x-8000-000x), TP600 (0762-430x-8000-000x), TP600 (0762-520x-8000-000x), TP600 (0762-530x-8000-000x), TP600 (0762-620x-8000-000x), TP600 (0762-630x-8000-000x), Edge Controller (0752-8303-8000-0002), WP400 (0762-340x)

Vulnerable Versions:

0.0.0