Description (CNA)
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WAGO / Compact Controller CC100 (751-9301) | affected FW16 before FW22 |
| WAGO / Edge Controller (752-8303/8000-002) | affected FW16 before FW22 |
| WAGO / Series PFC100 (750-81xx/xxx-xxx) | affected FW16 before FW22 |
| WAGO / Series PFC200 (750-82xx/xxx-xxx) | affected FW16 before FW22 |
| WAGO / Series Touch Panel 600 Advanced Line (762-5xxx) | affected FW16 FW22 |
| WAGO / Series Touch Panel 600 Marine Line (762-6xxx) | affected FW16 FW22 |
| WAGO / Series Touch Panel 600 Standard Line (762-4xxx) | affected FW16 FW22 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.