PT-2022-15481 · Wago · 750-8100 Firmware+31

Mohamed Magdy Abumuslim · Published 2022-03-09 · Updated 2022-03-18 · CVE-2022-22511

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions No specific software or version is mentioned, so the information cannot be provided.

Description The issue concerns reflected XSS (Cross-Site Scripting) attacks on various configuration pages of a device. An authorized attacker with user privileges may exploit this to gain access to confidential information on a PC that connects to the device after it has been compromised.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-22511

Affected Products

750-8100 Firmware

750-8101/025-000 Firmware

750-8101 Firmware

750-8102/025-000 Firmware

750-8102 Firmware

750-8202/000-012 Firmware

750-8202/000-022 Firmware

750-8202/025-000 Firmware

750-8202/025-001 Firmware

750-8202 Firmware

750-82 Firmware

751-9301 Firmware

752-8303/8000-002 Firmware

762-4205/8000-002 Firmware

762-4206/8000-002 Firmware

762-4305/8000-002 Firmware

762-4306/8000-002 Firmware

762-5205/8000-001 Firmware

762-5206/8000-001 Firmware

762-5305/8000-002 Firmware

762-5306/8000-002 Firmware

762-6301/8000-002 Firmware

762-6302/8000-002 Firmware

762-6303/8000-002 Firmware

762-6304/8000-002 Firmware

Compact Controller Cc100

Edge Controller

Series Pfc100

Series Pfc200

Wago Series Wago Touch Panel 600 Advanced Line

Wago Series Wago Touch Panel 600 Marine Line

Wago Series Wago Touch Panel 600 Standard Line

References · 4

• https://osv.dev/vulnerability/CVE-2022-22511 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22511 · Security Note
• https://cert.vde.com/en/advisories/VDE-2022-004 · Note
• https://t.me/cibsecurity/38625 · Telegram Post