{"affected":[],"cveId":"CVE-2024-1490","cwes":["CWE-94"],"description":"An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on the device.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.2,"severity":"high","source":"NVD: info@cert.vde.com","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794168600187,"publishedAt":1775733379657,"references":[{"source":"info@cert.vde.com","tags":[],"url":"https://certvde.com/de/advisories/VDE-2024-008"},{"source":"info@cert.vde.com","tags":[],"url":"https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2024-008.json"}],"remediation":[],"revision":"442f185292198c0f9a217c3289db8f47f42926beed3da184601481f3990ccc73","sources":[{"modifiedAt":1794168600187,"name":"NVD","retrievedAt":1794183355961,"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1490"}],"ssvc":{"assessedAt":1775744856814,"automatable":"no","exploitation":"none","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"total"},"status":"published","title":"CVE-2024-1490","updatedAt":1794183355961}