CVE-2024-41972: WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices
Published Nov 18, 2024
·Updated
A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges.
Affected Software
1 affected component
WAGO Multiple Devices
Event History
Nov 18, 2024
CVE Published
via MITRE·09:04 AM
Data Sourced
via MITRE·09:04 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-41972?
CVE-2024-41972 is classified as a low severity vulnerability.
2
How do I fix CVE-2024-41972?
To fix CVE-2024-41972, ensure that all affected WAGO Multiple Devices are updated to the latest firmware released by the vendor.
3
What types of attacks can exploit CVE-2024-41972?
CVE-2024-41972 can be exploited by low privileged remote attackers to overwrite arbitrary files on the filesystem.
4
What are the potential impacts of CVE-2024-41972?
Exploitation of CVE-2024-41972 may lead to unauthorized file read access with root privileges.
5
Which devices are affected by CVE-2024-41972?
CVE-2024-41972 affects various WAGO Multiple Devices.