CVE-2022-45137
27.02.2023, 15:15
The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.
| Vendor | Product | Version |
|---|---|---|
| wago | 751-9301_firmware | 16 ≤ 𝑥 < 22 |
| wago | 752-8303\/8000-002_firmware | 18 ≤ 𝑥 < 22 |
| wago | pfc100_firmware | 16 ≤ 𝑥 < 22 |
| wago | pfc200_firmware | 16 ≤ 𝑥 < 22 |
| wago | touch_panel_600_advanced_firmware | 16 ≤ 𝑥 < 22 |
| wago | touch_panel_600_marine_firmware | 16 ≤ 𝑥 < 22 |
| wago | touch_panel_600_standard_firmware | 16 ≤ 𝑥 < 22 |
𝑥
= Vulnerable software versions