CVE-2023-1698

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

82.04% chance of exploitation in the next 30 days, 100th percentile

Nuclei

critical · CWE-78

Published

2023-05-15

Updated

2025-01-23

Proof-of-concept exploits (4)

• Chocapikk/CVE-2023-16985★ · 2023-09-15
• X3RX3SSec/CVE-2023-16984★ · 2025-02-22
• deIndra/CVE-2023-16980★ · 2023-10-20
• thedarknessdied/WAGO-CVE-2023-16982★ · 2023-10-20

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1698.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2022-0169
• CVE-2023-5360
• CVE-2025-2011
• CVE-2023-36076
• CVE-2023-3306
• CVE-2023-4169