Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

WAGO firmware before 4.10.0 lets low-privileged users change PROFIBUS settings

Original title: WAGO OS Linux

CISA Advisoriesby CISA ()12 min read3 · 2 reads
Read at cisa.gov
AI summary · x-ai/grok-4.7Summaries by Vani AI

Web-Based Management fails to enforce permissions, so a remote user can alter root-owned fieldbus parameters.

WAGO firmware from 1.0.0 before 4.10.0 on numerous controller models does not enforce Web-Based Management permissions for all PROFIBUS configuration operations. A low-privileged remote attacker can change root-owned parameters, including device addressing and SSA settings. WAGO tells users to install firmware 4.10.0 (FW32) or higher; the related advisory is VDE-2026-096.

Unconfirmed: No CVE identifier appears in the provided excerpt, which also truncates the product list.

Key facts
  • The excerpt says 44 products are affected, then cuts off the list.
  • Named hardware includes 0751-9x01, 0750-811x, 0750-821x, and 0762 series.
  • PFC100 and PFC200 manuals recommend restricting access and using a VPN.
  • Users of custom firmware are told to contact WAGO support.
Security assessment · AI, from the article

Impact: Unauthorized changes to root-owned PROFIBUS configuration

ProductAffectedFixed in
WAGO Firmware>=1.0.0 and <4.10.0 on listed hardware4.10.0 (FW32) or higher
What to do
  1. 1.Update WAGO firmware to version 4.10.0 (FW32) or higher.
  2. 2.Contact WAGO support for the latest custom firmware.
  3. 3.Follow PFC100 and PFC200 manual guidance on access restriction and VPN use.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
wagoprofibusicsfirmwareprivilege-boundary
Vendors
WAGO
Products
WAGO FirmwarePFC100PFC200

From the original article

12 min read at cisa.gov

View CSAF Summary Two vulnerabilities in the Web-Based Management (WBM) interface of WAGO CC100, PFC100 G2, PFC200 G2, TP600, Edge Controller and WP400 devices allow an authenticated low-privileged user to bypass intended privilege boundaries. The issues affect both the routing configuration functionality and the authorization model for PROFIBUS configuration management.

CISA Advisories

By CISA · cisa.gov

Read the full article at CISA Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.