WAGO OpenVPN Web Management Interface Arbitrary Command Execution Vulnerability

A vulnerability exists in the web-based management interface of WAGO PLCs with OpenVPN enabled. An authenticated remote attacker with high privileges can exploit this vulnerability to execute arbitrary shell commands on the device. This could lead to a full system compromise, especially if user-defined scripts are allowed.

Impact

Exploitation allows authenticated attackers with high privileges to execute arbitrary shell commands on the affected device, potentially leading to a full system compromise.

Remediation

Users can drop OpenVPN privileges. Instructions for this mitigation are available in the WAGO manual "Cyber Security for Controller PFC100 / PFC200" in section 7.1.4.