CVE-2023-4149 — WAGO: OS Command Injection Vulnerability in Managed Switch
A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those commands are execut…
Published: 2023-11-21 · CVSS: 9.8 · CVSS 3.1
A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those commands are executed with root privileges. The vulnerability is located in the user request handling of the web-based management.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7