CVE-2023-4149 is a critical command injection vulnerability affecting specific WAGO 0852 series devices and their firmware, allowing unauthenticated remote attackers to execute arbitrary system commands with root privileges through the web-based management interface. With a CVSS score of 9.8, this vulnerability presents a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While no public exploits (Metasploit, Nuclei, ExploitDB) are currently available and there is minimal community discussion or media coverage, the potential for full system control necessitates immediate patching. This vulnerability is not listed in CISA's KEV catalog, indicating no known active exploitation at this time.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.0.6.s0CPE matchmatch criteria | cpe:2.3:o:wago:0852-0602_firmware:*:*:*:*:*:*:*:* | ||
< 1.0.6.s0CPE matchmatch criteria | cpe:2.3:o:wago:0852-0603_firmware:*:*:*:*:*:*:*:* | ||
< 1.2.5.s0CPE matchmatch criteria | cpe:2.3:o:wago:0852-1605_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.