WAGO OS Linux
Summary
Two vulnerabilities in the Web-Based Management (WBM) interface of WAGO devices allow an authenticated, low-privileged user to bypass intended privilege boundaries. These issues affect both routing configuration and authorization for PROFIBUS configuration management.
IFF Assessment
FOE
These vulnerabilities allow privilege escalation, which is detrimental to defenders by potentially enabling unauthorized access and control.
Defender Context
These vulnerabilities in WAGO industrial control systems (ICS) are critical as they can be exploited by low-privileged users to gain higher access. Defenders should prioritize patching these devices to prevent potential operational disruptions and unauthorized modifications to sensitive configurations like PROFIBUS.