Wago Smart Designer Observable Discrepancy Vulnerability Allowing Project and Username Enumeration
Vulnerability
A vulnerability exists in Wago Smart Designer versions through 2.33.1, allowing low-privileged remote attackers to enumerate projects and usernames by sending iterative requests to a specific endpoint. This could lead to the disclosure of sensitive information.
Impact
Exploitation of this vulnerability could result in the unauthorized disclosure of project and username information.
Remediation
Users can upgrade to Wago Smart Designer version 2.34 to address this vulnerability.
Added: Apr 16, 2026, 5:22 AM
Updated: Apr 16, 2026, 5:22 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
5.2remediation
0.0relevance
6.0threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.