Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2022-22511

WAGO PLCs WBM vulnerable to reflected XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO Compact Controller CC100 (751-9301)

  • FW16 to < FW22affected

WAGO Edge Controller (752-8303/8000-002)

  • FW16 to < FW22affected

WAGO Series PFC100 (750-81xx/xxx-xxx)

  • FW16 to < FW22affected

WAGO Series PFC200 (750-82xx/xxx-xxx)

  • FW16 to < FW22affected

WAGO Series Touch Panel 600 Advanced Line (762-5xxx)

  • FW16 FW22affected

WAGO Series Touch Panel 600 Marine Line (762-6xxx)

  • FW16 FW22affected

WAGO Series Touch Panel 600 Standard Line (762-4xxx)

  • FW16 FW22affected

References