WAGO e!DISPLAY Web-Based-Management

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to execute code in the context of the user, execute code within the user 's browser, place malicious files within the filesystem, and replace existing files to allow privilege escalation.

CVEs (1)

Remediations

• WAGO recommends affected users update to the latest firmware (FW 02). Contact WAGO support for update files and specific instructions.
• Update the device to the latest firmware.
• Restrict network access to the device.
• Do not directly connect the device to the Internet.
• Restrict the number of users with access to the device to a minimum.
• Change the default passwords of devices.
• Do not install software from untrusted sources.
• Do not open websites or follow links from untrusted sources.
• WAGO has published a security advisory

Affected Vendors

Affected Products (4)

Affected Sectors

Commercial Facilities, Critical Manufacturing, Energy, and Transportation Systems