Arbitrary File Overwrite and Root Access Vulnerability
CVE-2024-41972

6.5MEDIUM

Key Information:

Vendor: Wago
Status: Cc100 0751-9x01; Pfc100 G2 0750-811x-xxxx-xxxx; Pfc200 G2 750-821x-xxx-xxx; Tp600 0762-420x/8000-000x
Vendor: CVE Published:; 18 November 2024

What is CVE-2024-41972?

A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges.

CC100 0751-9x01 0.0.0 <= 4.5.10 (FW27)

CC100 0751/9x01 0.0.0 <= 04.03.03 (72)

CC100 0751/9x01 0.0.0 <= 04.04.03 (70)

Score:

6.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Diego Giubertoni

Nozomi Networks