CVE-2024-41969
WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple Devices
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple Devices
| Assigner | CERTVDE |
| Reserved | 2024-07-25 |
| Published | 2024-11-18 |
| Updated | 2024-11-18 |
A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS.
| CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Diego Giubertoni
Nozomi Networks
https://cert.vde.com/en/advisories/VDE-2024-047
