CVE-2023-1698 PoC — WAGO: WBM Command Injection in multiple products

Source

https://github.com/ibrahmsql/CVE-2023-1698

Associated Vulnerability

Title: WAGO: WBM Command Injection in multiple products (CVE-2023-1698)
Description:In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.

Description

CVE-2023-1698 exploit with golang

Readme

# CVE-2023-1698
CVE-2023-1698 exploit with golang 


# how to use 
```
go build  CVE-2023-1698 main.go 
OR
go build main.go 
```
---
```
Examples:
  ./cve-2023-1698 -u http://target.com
  ./cve-2023-1698 -l urls.txt -o vulnerable.txt -t 20
  ./cve-2023-1698 -u http://target.com -c "whoami" -v
```
  ---

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →