Beveiligingsadvies

CVE-2024-1490

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-09 10:52:41
Laatst bijgewerkt 2026-04-09 16:15:38
Toegewezen door CERTVDE
CVSS-score 7.2
Status PUBLISHED

Beschrijving

An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.