Description (CNA)
An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WAGO / CC100 0751-9x01 | affected 0.0.0 before 04.07.01 (FW29) |
| WAGO / CC100 0751-9x01 | affected 0.0.0 before 04.07.01 (70 |
| WAGO / PFC100 G1 0750-810x/xxxx-xxxx | affected 0.0.0 before 3.10.11 (FW22 Patch 2) |
| WAGO / PFC100 G2 0750-811x-xxxx-xxxx | affected 0.0.0 before 04.07.01 (70) |
| WAGO / PFC200 G1 750-820x-xxx-xxx | affected 0.0.0 before 3.10.11 (FW22 Patch 2) |
| WAGO / PFC200 G2 750-821x-xxx-xxx | affected 0.0.0 before 04.07.01 (FW29) |
| WAGO / PFC200 G2 750-821x-xxx-xxx | affected 0.0.0 before 04.07.01 (70) |
| WAGO / TP600 0762-420x/8000-000x | affected 0.0.0 before 04.07.01 (FW29) |
| WAGO / TP600 0762-420x/8000-000x | affected 0.0.0 before 04.07.01 (70) |
| WAGO / TP600 0762-430x/8000-000x | affected 0.0.0 before 04.07.01 (FW29) |
| WAGO / TP600 0762-430x/8000-000x | affected 0.0.0 before 04.07.01 (70) |
| WAGO / TP600 0762-520x/8000-000x | affected 0.0.0 before 04.07.01 (FW29) |
| WAGO / TP600 0762-520x/8000-000x | affected 0.0.0 before 04.07.01 (70) |
| WAGO / TP600 0762-530x/8000-000x | affected 0.0.0 before 04.07.01 (FW29) |
| WAGO / TP600 0762-530x/8000-000x | affected 0.0.0 before 04.07.01 (70) |
| WAGO / TP600 0762-620x/8000-000x | affected 0.0.0 before 04.07.01 (FW29) |
| WAGO / TP600 0762-620x/8000-000x | affected 0.0.0 before 04.07.01 (70) |
| WAGO / TP600 0762-630x/8000-000x | affected 0.0.0 before 04.07.01 (FW29) |
| WAGO / TP600 0762-630x/8000-000x | affected 0.0.0 before 04.07.01 (70) |
| WAGO / Edge Controller 0752-8303/8000-0002 | affected 0.0.0 before 04.07.01 (FW29) |
| WAGO / Edge Controller 0752-8303/8000-0002 | affected 0.0.0 before 04.07.01 (70) |
CWE
CWE-942
References
ADP enrichment
No English description supplied.
No references supplied.