Plan ahead High Patch available
WAGO password reset flaw could let attackers take over accounts
CERT@VDE advisoriesWAGO
What happened. A flaw in WAGO's credential recovery process lets an unauthenticated attacker bypass checks during password resets. The attacker could reset credentials for any user account and gain access without valid credentials. No score is given.
Who is affected. Users of the affected WAGO product. The report does not name the product or versions.
What to do. Apply the vendor fix in advisory VDE-2026-102 and check which WAGO products you run that offer password reset.
When to act. Plan ahead: judged high and no score stated: check the vendor advisory
Editor's reading
Forasset ownerOT security lead
- Purdue level
- L3
- L2
Why: The report does not name the product, so these levels are a guess based on a typical WAGO management interface in plant networks.
- Are you exposed?
Check your asset inventory for WAGO products with a password reset or account recovery feature, and confirm whether that interface is reachable from other networks.
- If you cannot fix it yet
- Restrict access to the product's web or management interface to known administrator hosts only.
- Block the interface from the corporate network and the internet until the fix is applied.
- Watch for
- Look for password reset requests on the affected product, especially from unknown sources.
- Look for logons by accounts shortly after a reset that the account owner did not request.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: CERT@VDE advisories (opens certvde.com)
More on WAGO