QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-1490

Back to search

CVE-2024-1490

Published: Apr 9, 2026

Modified: Apr 9, 2026

PUBLISHED

CVSS v3.1

7.2

HIGH

Description

An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.

VendorProductVersions

WAGO

CC100 (0751-9x01)

affected
0.0.0 - <= 4.5.10

WAGO

PFC100 G1 (0750-810-xxxx-xxxx)

affected
0.0.0 - <= 3.10.10

WAGO

PFC100 G2 (0750-811x-xxxx-xxxx)

affected
0.0.0 - <= 4.5.10

WAGO

PFC200 G1 (750-820x-xxxx-xxxx)

affected
0.0.0 - <= 3.10.10

WAGO

PFC200 G2 (750-821x-xxxx-xxxx)

affected
0.0.0 - <= 4.5.10

WAGO

TP600 (0762-420x-8000-000x)

affected
0.0.0 - <= FW 26

WAGO

TP600 (0762-430x-8000-000x)

affected
0.0.0 - <= 4.5.10

WAGO

TP600 (0762-520x-8000-000x)

affected
0.0.0 - <= 4.5.10

WAGO

TP600 (0762-530x-8000-000x)

affected
0.0.0 - <= 4.5.10

WAGO

TP600 (0762-620x-8000-000x)

affected
0.0.0

WAGO

TP600 (0762-630x-8000-000x)

affected
0.0.0 - <= 4.5.10

WAGO

Edge Controller (0752-8303-8000-0002)

affected
0.0.0 - <= 4.5.10

WAGO

WP400 (0762-340x)

affected
0.0.0 - <= 4.5.10

Weaknesses (CWE)

CWE-94

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now