WAGO: Vulnerabilities in Device Sphere and Solution Builder

An unauthenticated attacker on the network could access sensitive information from WAGO Device Sphere or Solution Builder, potentially exposing engineering data, device configurations, or system parameters critical to your operational setup.

Organizations using WAGO Device Sphere for device management or WAGO Solution Builder for engineering and automation configuration are affected. This impacts any engineering team or maintenance personnel who use these tools to manage WAGO industrial controllers and edge devices.

An attacker with network access to the WAGO Device Sphere or Solution Builder interface can bypass authentication checks to directly query sensitive information without providing credentials. No special tools are required—standard HTTP requests to the affected software endpoints would expose the data.