Is CVE-2023-4089 actively exploited?

No active exploitation of CVE-2023-4089 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2023-4089 be exploited remotely?

Yes. CVE-2023-4089 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2023-4089?

CVE-2023-4089 has a CVSS score of 2.7 (LOW).

HOME VULNERABILITIESCVE-2023-4089

LOW

CVE-2023-4089

CWE-610Published: October 17, 2023· Updated: Jun 17, 2026

2.7

CVSS v3.1

Official Description

On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.

NVD Source

Technical Analysis

CVE-2023-4089 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.High

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityLow

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Affected Vendors & Products

wago14 product(s)

compact controller 100 firmwarecompact controller 100edge controller firmwareedge controllerpfc100 firmwarepfc100pfc200 firmwarepfc200touch panel 600 advanced firmwaretouch panel 600 advancedtouch panel 600 marine firmwaretouch panel 600 marine+2

Source: NVD CPE · 14 total CPE entries