CVE-2023-1698

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
WAGO	Compact Controller CC100	>= FW20, <= FW22; FW23
WAGO	Edge Controller	FW22
WAGO	PFC100	>= FW20, <= FW22; FW23
WAGO	PFC200	>= FW20, <= FW22; FW23
WAGO	Touch Panel 600 Advanced Line	FW22
WAGO	Touch Panel 600 Marine Line	FW22
WAGO	Touch Panel 600 Standard Line	FW22

References

https://cert.vde.com/en/advisories/VDE-2023-007/Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2023-007/Third Party Advisory

Timeline

Published: May 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-16999.8Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability. This vulnerability allows an attacker to manipulate CVE-2023-17015.4Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20.CVE-2023-17025.4Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.CVE-2023-17035.4Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.CVE-2023-17045.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20.CVE-2023-17057.8Missing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows (bgAutoinstaller service modules) allows Privilege Escala CVE-2023-17077.5Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure when IPsec is enabled w CVE-2023-17089.8An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 wh CVE-2023-17097.8Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, whi CVE-2023-17105.3A sensitive information disclosure vulnerability in GitLab affecting all versions from 15.0 prior to 15.8.5, 15.9 prior to 15.9.4 and 15.10 CVE-2023-17114.4A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elem CVE-2023-17129.8Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack prior to 0.1.30.