CVE-2022-45140

The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CERTVDECNA
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
VendorProductVersion
wago751-9301_firmware
16 ≤
𝑥
< 22
wago752-8303\/8000-002_firmware
18 ≤
𝑥
< 22
wagopfc100_firmware
16 ≤
𝑥
< 22
wagopfc200_firmware
16 ≤
𝑥
< 22
wagotouch_panel_600_advanced_firmware
16 ≤
𝑥
< 22
wagotouch_panel_600_marine_firmware
16 ≤
𝑥
< 22
wagotouch_panel_600_standard_firmware
16 ≤
𝑥
< 22
𝑥
= Vulnerable software versions