{"id":"CVE-2024-1490","aliases":["EUVD-2024-17238","GHSA-4p2f-67g5-7xhf"],"status":"published","title":"Wago: Vulnerability in WBM through Open VPN","description":"An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00742,"percentile":0.54989,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2026-04-09T10:52:41Z","modified":"2026-11-08T20:10:00Z","products":[{"vendor":"wago","product":"cc100 (0751-9x01)"},{"vendor":"wago","product":"edge controller (0752-8303-8000-0002)"},{"vendor":"wago","product":"pfc100 g1 (0750-810-xxxx-xxxx)"},{"vendor":"wago","product":"pfc100 g2 (0750-811x-xxxx-xxxx)"},{"vendor":"wago","product":"pfc200 g1 (750-820x-xxxx-xxxx)"},{"vendor":"wago","product":"pfc200 g2 (750-821x-xxxx-xxxx)"},{"vendor":"wago","product":"tp600 (0762-420x-8000-000x)"},{"vendor":"wago","product":"tp600 (0762-430x-8000-000x)"},{"vendor":"wago","product":"tp600 (0762-520x-8000-000x)"},{"vendor":"wago","product":"tp600 (0762-530x-8000-000x)"},{"vendor":"wago","product":"tp600 (0762-620x-8000-000x)"},{"vendor":"wago","product":"tp600 (0762-630x-8000-000x)"},{"vendor":"wago","product":"wp400 (0762-340x)"}],"references":[{"url":"https://certvde.com/de/advisories/VDE-2024-008"},{"url":"https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2024-008.json","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1490"},{"url":"https://github.com/advisories/GHSA-4p2f-67g5-7xhf"}],"sources":{"cve":[{"id":"CVE-2024-1490","title":"Wago: Vulnerability in WBM through Open VPN","description":"An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.","status":"published","published":"2026-04-09T10:52:41.174Z","modified":"2026-04-09T16:15:38.524Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:34:17.865042Z"}],"euvd":[{"id":"EUVD-2024-17238","description":"An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.","status":"published","published":"2026-04-09T10:52:41Z","modified":"2026-04-09T16:15:38Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:24:30.741683Z"}],"ghsa":[{"id":"GHSA-4p2f-67g5-7xhf","title":"An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via...","description":"An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.","status":"published","published":"2026-04-09T12:31:11Z","modified":"2026-04-09T12:31:22Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:07:23.752851Z"}],"nvd":[{"id":"CVE-2024-1490","description":"An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.","status":"published","published":"2026-04-09T11:16:19.657Z","modified":"2026-11-08T20:10:00.187Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-08T22:11:09.649279Z"}]}}