← CVE Intelligence

CVE-2022-45137

WAGO: Reflective Cross-Site Scripting PUBLISHED

Description (CNA)

The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.

Affected (CNA)

Vendor / productVersions
WAGO / Compact Controller CC100 (751-9301)affected FW16 before FW22; unaffected FW22 Patch 1; affected FW23
WAGO / Edge Controller (752-8303/8000-002)affected FW18 before FW22; unaffected FW22 Patch 1; affected FW23
WAGO / PFC100 (750-81xx/xxx-xxx)affected FW16 before FW22; unaffected FW22 Patch 1; affected FW23
WAGO / PFC200 (750-82xx/xxx-xxx)affected FW16 before FW22; unaffected FW22 Patch 1; affected FW23
WAGO / Touch Panel 600 Advanced Line (762-5xxx)affected FW16 before FW22; unaffected FW22 Patch 1; affected FW23
WAGO / Touch Panel 600 Marine Line (762-6xxx)affected FW16 before FW22; unaffected FW22 Patch 1; affected FW23
WAGO / Touch Panel 600 Standard Line (762-4xxx)affected FW16 before FW22; unaffected FW22 Patch 1; affected FW23

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.