CVE-2023-5872

In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requests to an specific endpoint.

Score

CVSS 3.1 4.3 Medium

Status

Awaiting Analysis - info@cert.vde.com

Published

2026-04-16

Last modified

2026-10-28

Weaknesses

CWE-203

Affected products

• Smart Designer (Wago)

References

• https://certvde.com/de/advisories/VDE-2023-045
• https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2023/vde-2023-045.json