{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"CC100 (0751-9x01)","vendor":"WAGO","versions":[{"lessThanOrEqual":"4.5.10","status":"affected","version":"0.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"PFC100 G1 (0750-810-xxxx-xxxx)","vendor":"WAGO","versions":[{"lessThanOrEqual":"3.10.10","status":"affected","version":"0.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"PFC100 G2 (0750-811x-xxxx-xxxx)","vendor":"WAGO","versions":[{"lessThanOrEqual":"4.5.10","status":"affected","version":"0.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"PFC200 G1 (750-820x-xxxx-xxxx)","vendor":"WAGO","versions":[{"lessThanOrEqual":"3.10.10","status":"affected","version":"0.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"PFC200 G2 (750-821x-xxxx-xxxx)","vendor":"WAGO","versions":[{"lessThanOrEqual":"4.5.10","status":"affected","version":"0.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TP600 (0762-420x-8000-000x)","vendor":"WAGO","versions":[{"lessThanOrEqual":"FW 26","status":"affected","version":"0.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TP600 (0762-430x-8000-000x)","vendor":"WAGO","versions":[{"lessThanOrEqual":"4.5.10","status":"affected","version":"0.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TP600 (0762-520x-8000-000x)","vendor":"WAGO","versions":[{"lessThanOrEqual":"4.5.10","status":"affected","version":"0.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TP600 (0762-530x-8000-000x)","vendor":"WAGO","versions":[{"lessThanOrEqual":"4.5.10","status":"affected","version":"0.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"TP600 (0762-620x-8000-000x)","vendor":"WAGO","versions":[{"status":"affected","version":"0.0.0"}]},{"defaultStatus":"unaffected","product":"TP600 (0762-630x-8000-000x)","vendor":"WAGO","versions":[{"lessThanOrEqual":"4.5.10","status":"affected","version":"0.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Edge Controller (0752-8303-8000-0002)","vendor":"WAGO","versions":[{"lessThanOrEqual":"4.5.10","status":"affected","version":"0.0.0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"WP400 (0762-340x)","vendor":"WAGO","versions":[{"lessThanOrEqual":"4.5.10","status":"affected","version":"0.0.0","versionType":"semver"}]}],"source":"info@cert.vde.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device."},{"lang":"es","value":"Un atacante remoto autenticado con privilegios elevados puede explotar la configuración de OpenVPN a través de la interfaz de gestión basada en web de un PLC WAGO. Si se permiten scripts definidos por el usuario, OpenVPN podría permitir la ejecución de comandos de shell arbitrarios, lo que permite al atacante ejecutar comandos arbitrarios en el dispositivo."}],"id":"CVE-2024-1490","lastModified":"2026-11-08T20:10:00.187","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"info@cert.vde.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-1490","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-04-09T14:27:36.814209Z","version":"2.0.3"}}]},"published":"2026-04-09T11:16:19.657","references":[{"source":"info@cert.vde.com","url":"https://certvde.com/de/advisories/VDE-2024-008"},{"source":"info@cert.vde.com","url":"https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2024-008.json"}],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-94"}],"source":"info@cert.vde.com","type":"Secondary"}]}