{"document":{"acknowledgments":[{"organization":"CERT@VDE","summary":"coordination"},{"names":["Jeroen Wijenbergh","Floris Hendriks"],"organization":"Radboud University","summary":"reporting"}],"aggregate_severity":{"namespace":"https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale","text":"High"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en-US","notes":[{"category":"summary","text":"A security vulnerability has been identified in the Web-Based Management (WBM) function when OpenVPN is enabled.","title":"Summary"},{"category":"description","text":"An authenticated attacker with high privileges can execute arbitrary shell commands on the affected device, potentially leading to full system compromise.","title":"Impact"},{"category":"description","text":"The user is able to drop privileges of OpenVPN. How to do this is described in the Manual \"Cyber Security for Controller PFC100 / PFC200\" at section 7.1.4. and in the product manual.","title":"Mitigation"}],"publisher":{"category":"vendor","contact_details":"psirt@wago.com","name":"WAGO GmbH & Co. KG","namespace":"https://www.wago.com/psirt"},"references":[{"category":"self","summary":"WAGO PSIRT","url":"https://www.wago.com/de-en/automation-technology/psirt"},{"category":"external","summary":"CERT@VDE Security Advisories for WAGO","url":"https://certvde.com/de/advisories/vendor/wago/"},{"category":"self","summary":"VDE-2024-008: Wago: Vulnerability in WBM through Open VPN - HTML","url":"https://certvde.com/en/advisories/VDE-2024-008"},{"category":"self","summary":"VDE-2024-008: Wago: Vulnerability in WBM through Open VPN - CSAF","url":"https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2024-008.json"}],"title":"Wago: Vulnerability in WBM through Open VPN","tracking":{"aliases":["VDE-2024-008"],"current_release_date":"2026-04-08T07:00:00.000Z","generator":{"date":"2026-03-30T12:35:08.140Z","engine":{"name":"Secvisogram","version":"2.5.44"}},"id":"VDE-2024-008","initial_release_date":"2026-04-08T07:00:00.000Z","revision_history":[{"date":"2026-04-08T07:00:00.000Z","number":"1.0.0","summary":"Initial Release."}],"status":"final","version":"1.0.0"}},"product_tree":{"branches":[{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"0751-9x01","product":{"name":"CC100 0751-9x01","product_id":"CSAFPID-11001","product_identification_helper":{"model_numbers":["0751-9?01"]}}}],"category":"product_family","name":"CC100"},{"branches":[{"category":"product_name","name":"0750-810-xxxx-xxxx","product":{"name":"PFC100 G1 0750-810-xxxx-xxxx","product_id":"CSAFPID-11002","product_identification_helper":{"model_numbers":["0750-810?-????-????"]}}}],"category":"product_family","name":"PFC100 G1"},{"branches":[{"category":"product_name","name":"0750-811x-xxxx-xxxx","product":{"name":"PFC100 G2 0750-811x-xxxx-xxxx","product_id":"CSAFPID-11003","product_identification_helper":{"model_numbers":["0750-811?-????-????"]}}}],"category":"product_family","name":"PFC100 G2"},{"branches":[{"category":"product_name","name":"750-820x-xxxx-xxxx","product":{"name":"PFC200 G1 750-820x-xxx-xxx","product_id":"CSAFPID-11004","product_identification_helper":{"model_numbers":[" 750-820?-????-????"]}}}],"category":"product_family","name":"PFC200 G1"},{"branches":[{"category":"product_name","name":"750-821x-xxxx-xxxx","product":{"name":"PFC200 G2 750-821x-xxx-xxx","product_id":"CSAFPID-11005","product_identification_helper":{"model_numbers":["750-821?-????-????"]}}}],"category":"product_family","name":"PFC200 G2"},{"branches":[{"category":"product_name","name":"0762-420x-8000-000x","product":{"name":"TP600 0762-420x-8000-000x","product_id":"CSAFPID-11006","product_identification_helper":{"model_numbers":["0762-420?-8000-000?"]}}},{"category":"product_name","name":"0762-430x-8000-000x","product":{"name":"TP600 0762-430x-8000-000x","product_id":"CSAFPID-11007","product_identification_helper":{"model_numbers":["0762-430?-8000-000?"]}}},{"category":"product_name","name":"0762-520x-8000-000x","product":{"name":"TP600 0762-520x-8000-000x","product_id":"CSAFPID-11008","product_identification_helper":{"model_numbers":["0762-520?-8000-000?"]}}},{"category":"product_name","name":"0762-530x-8000-000x","product":{"name":"TP600 0762-530x-8000-000x","product_id":"CSAFPID-11009","product_identification_helper":{"model_numbers":["0762-530?-8000-000?"]}}},{"category":"product_name","name":"0762-620x-8000-000x","product":{"name":"TP600 0762-620x-8000-000x","product_id":"CSAFPID-11010","product_identification_helper":{"model_numbers":["0762-620?-8000-000?"]}}},{"category":"product_name","name":"0762-630x-8000-000x","product":{"name":"TP600 0762-630x-8000-000x","product_id":"CSAFPID-11011","product_identification_helper":{"model_numbers":["0762-630?-8000-000?"]}}}],"category":"product_family","name":"TP600"},{"branches":[{"category":"product_name","name":"0752-8303-8000-0002","product":{"name":"Edge Controller 0752-8303-8000-0002","product_id":"CSAFPID-11012","product_identification_helper":{"model_numbers":["0752-8303/8000-0002"]}}}],"category":"product_family","name":"Edge Controller"},{"branches":[{"category":"product_name","name":"0762-340x","product":{"name":"WP400 0762-340x","product_id":"CSAFPID-11013","product_identification_helper":{"model_numbers":["0762-340?"]}}}],"category":"product_family","name":"WP400"}],"category":"product_family","name":"Hardware"},{"branches":[{"branches":[{"category":"product_version_range","name":"vers:generic/<=4.5.10","product":{"name":"wago_os_linux <=4.5.10","product_id":"CSAFPID-21001"}},{"category":"product_version_range","name":"vers:generic/<=3.10.10","product":{"name":"wago_os_linux <=3.10.10","product_id":"CSAFPID-21002"}},{"category":"product_version","name":"4.5.10","product":{"name":"wago_os_linux 4.5.10","product_id":"CSAFPID-21003","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:4.5.10:*:*:*:*:*:*:*"}}},{"category":"product_version","name":"3.10.10","product":{"name":"wago_os_linux 3.10.10","product_id":"CSAFPID-21004","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:3.10.10:*:*:*:*:*:*:*"}}}],"category":"product_name","name":"wago_os_linux"}],"category":"product_family","name":"Firmware"}],"category":"vendor","name":"WAGO"}],"product_groups":[{"group_id":"CSAFGID-0001","product_ids":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026"],"summary":"Affected products."}],"relationships":[{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=4.5.10 installed on CC100 0751-9x01","product_id":"CSAFPID-31001","product_identification_helper":{"model_numbers":["0751-9?01"]}},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11001"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=3.10.10 installed on PFC100 G1 0750-810-xxxx-xxxx","product_id":"CSAFPID-31002","product_identification_helper":{"model_numbers":["0750-810?-????-????"]}},"product_reference":"CSAFPID-21002","relates_to_product_reference":"CSAFPID-11002"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=4.5.10 installed on PFC100 G2 0750-811x-xxxx-xxxx","product_id":"CSAFPID-31003","product_identification_helper":{"model_numbers":["0750-811?-????-????"]}},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11003"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=3.10.10 installed on PFC200 G1 750-820x-xxx-xxx","product_id":"CSAFPID-31004","product_identification_helper":{"model_numbers":["750-820?-????-????"]}},"product_reference":"CSAFPID-21002","relates_to_product_reference":"CSAFPID-11004"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=4.5.10 installed on PFC200 G2 750-821x-xxx-xxx","product_id":"CSAFPID-31005","product_identification_helper":{"model_numbers":["750-821?-????-????"]}},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11005"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=4.5.10 installed on TP600 0762-420x-8000-000x","product_id":"CSAFPID-31006","product_identification_helper":{"model_numbers":["0762-420?-8000-000?"]}},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11006"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=4.5.10 installed on TP600 0762-430x-8000-000x","product_id":"CSAFPID-31007","product_identification_helper":{"model_numbers":["0762-430?-8000-000?"]}},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11007"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=4.5.10 installed on TP600 0762-520x-8000-000x","product_id":"CSAFPID-31008","product_identification_helper":{"model_numbers":["0762-520?-8000-000?"]}},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11008"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=4.5.10 installed on TP600 0762-530x-8000-000x","product_id":"CSAFPID-31009","product_identification_helper":{"model_numbers":["0762-530?-8000-000?"]}},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11009"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=4.5.10 installed on TP600 0762-620x-8000-000x","product_id":"CSAFPID-31010","product_identification_helper":{"model_numbers":["0762-620?-8000-000?"]}},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11010"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=4.5.10 installed on TP600 0762-630x-8000-000x","product_id":"CSAFPID-31011","product_identification_helper":{"model_numbers":["0750-820?-????-????"]}},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11011"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=4.5.10 installed on Edge Controller 0752-8303-8000-0002","product_id":"CSAFPID-31012","product_identification_helper":{"model_numbers":["0762-630?-8000-000?"]}},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11012"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux <=4.5.10 installed on WP400 0762-340x","product_id":"CSAFPID-31013","product_identification_helper":{"model_numbers":["0762-340?"]}},"product_reference":"CSAFPID-21001","relates_to_product_reference":"CSAFPID-11013"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 4.5.10 installed on CC100 0751-9x01","product_id":"CSAFPID-31014","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:4.5.10:*:*:*:*:*:*:*","model_numbers":["0751-9?01"]}},"product_reference":"CSAFPID-21003","relates_to_product_reference":"CSAFPID-11001"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 3.10.10 installed on PFC100 G1 0750-810x/xxxx-xxxx","product_id":"CSAFPID-31015","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:3.10.10:*:*:*:*:*:*:*","model_numbers":["0750-810?-????-????"]}},"product_reference":"CSAFPID-21004","relates_to_product_reference":"CSAFPID-11002"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 4.5.10 installed on PFC100 G2 0750-811x-xxxx-xxxx","product_id":"CSAFPID-31016","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:4.5.10:*:*:*:*:*:*:*","model_numbers":["0750-811?-????-????"]}},"product_reference":"CSAFPID-21003","relates_to_product_reference":"CSAFPID-11003"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 3.10.10 installed on PFC200 G1 750-820x-xxx-xxx","product_id":"CSAFPID-31017","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:3.10.10:*:*:*:*:*:*:*","model_numbers":["750-820?-????-????"]}},"product_reference":"CSAFPID-21004","relates_to_product_reference":"CSAFPID-11004"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 4.5.10 installed on PFC200 G2 750-821x-xxx-xxx","product_id":"CSAFPID-31018","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:4.5.10:*:*:*:*:*:*:*","model_numbers":["750-821?-????-????"]}},"product_reference":"CSAFPID-21003","relates_to_product_reference":"CSAFPID-11005"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 4.5.10 installed on TP600 0762-420x-8000-000x","product_id":"CSAFPID-31019","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:4.5.10:*:*:*:*:*:*:*","model_numbers":["0762-420?-8000-000?"]}},"product_reference":"CSAFPID-21003","relates_to_product_reference":"CSAFPID-11006"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 4.5.10 installed on TP600 0762-430x-8000-000x","product_id":"CSAFPID-31020","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:4.5.10:*:*:*:*:*:*:*","model_numbers":["0762-430?-8000-000?"]}},"product_reference":"CSAFPID-21003","relates_to_product_reference":"CSAFPID-11007"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 4.5.10 installed on TP600 0762-520x-8000-000x","product_id":"CSAFPID-31021","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:4.5.10:*:*:*:*:*:*:*","model_numbers":["0762-520?-8000-000?"]}},"product_reference":"CSAFPID-21003","relates_to_product_reference":"CSAFPID-11008"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 4.5.10 installed on TP600 0762-530x-8000-000x","product_id":"CSAFPID-31022","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:4.5.10:*:*:*:*:*:*:*","model_numbers":["0762-530?-8000-000?"]}},"product_reference":"CSAFPID-21003","relates_to_product_reference":"CSAFPID-11009"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 4.5.10 installed on TP600 0762-620x-8000-000x","product_id":"CSAFPID-31023","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:4.5.10:*:*:*:*:*:*:*","model_numbers":["0762-620?-8000-000?"]}},"product_reference":"CSAFPID-21003","relates_to_product_reference":"CSAFPID-11010"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 4.5.10 installed on TP600 0762-630x-8000-000x","product_id":"CSAFPID-31024","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:4.5.10:*:*:*:*:*:*:*","model_numbers":["0750-820?-????-????"]}},"product_reference":"CSAFPID-21003","relates_to_product_reference":"CSAFPID-11011"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 4.5.10 installed on Edge Controller 0752-8303-8000-0002","product_id":"CSAFPID-31025","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:4.5.10:*:*:*:*:*:*:*","model_numbers":["0762-630?-8000-000?"]}},"product_reference":"CSAFPID-21003","relates_to_product_reference":"CSAFPID-11012"},{"category":"installed_on","full_product_name":{"name":"wago_os_linux 4.5.10 installed on WP400 0762-340x","product_id":"CSAFPID-31026","product_identification_helper":{"cpe":"cpe:2.3:o:wago:wago_os_linux:4.5.10:*:*:*:*:*:*:*","model_numbers":["0762-340?"]}},"product_reference":"CSAFPID-21003","relates_to_product_reference":"CSAFPID-11013"}]},"vulnerabilities":[{"cve":"CVE-2024-1490","cwe":{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')"},"notes":[{"category":"summary","text":"An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.","title":"CVE description"}],"product_status":{"known_affected":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026"]},"remediations":[{"category":"mitigation","date":"2025-12-10T10:00:00.000Z","details":"The user is able to drop privileges of OpenVPN. How to do this is described in the manual \"WAGO I/O System 750/753\" at section 7.1.1.5.1.","group_ids":["CSAFGID-0001"],"url":"https://www.wago.com/de/d/12464650#versions"}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","environmentalScore":7.2,"environmentalSeverity":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","temporalScore":7.2,"temporalSeverity":"HIGH","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["CSAFPID-31001","CSAFPID-31002","CSAFPID-31003","CSAFPID-31004","CSAFPID-31005","CSAFPID-31006","CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010","CSAFPID-31011","CSAFPID-31012","CSAFPID-31013","CSAFPID-31014","CSAFPID-31015","CSAFPID-31016","CSAFPID-31017","CSAFPID-31018","CSAFPID-31019","CSAFPID-31020","CSAFPID-31021","CSAFPID-31022","CSAFPID-31023","CSAFPID-31024","CSAFPID-31025","CSAFPID-31026"]}],"title":"Authenticated RCE via OpenVPN in WAGO PLC"}]}