{"id":"CVE-2022-3738","state":"PUBLISHED","title":"WAGO: Missing authentication for config export functionality in multiple products","description":"The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull.\n","publishedAt":"2023-01-19T11:27:51.814Z","updatedAt":"2025-04-02T14:55:51.603Z","severity":{"score":5.9,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"CERTVDE"},"assigner":"CERTVDE","products":["WAGO Series WAGO PFC100","WAGO Series WAGO PFC200","WAGO Series WAGO Touch Panel 600 Advanced Line","WAGO Series WAGO Touch Panel 600 Marine Line","WAGO Series WAGO Touch Panel 600 Standard Line","WAGO WAGO Compact Controller CC100","WAGO WAGO Edge Controller"],"affected":[{"vendor":"WAGO","product":"Series WAGO PFC100","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]},{"vendor":"WAGO","product":"Series WAGO PFC200","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]},{"vendor":"WAGO","product":"Series WAGO Touch Panel 600 Advanced Line","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]},{"vendor":"WAGO","product":"Series WAGO Touch Panel 600 Marine Line","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]},{"vendor":"WAGO","product":"Series WAGO Touch Panel 600 Standard Line","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]},{"vendor":"WAGO","product":"WAGO Compact Controller CC100","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]},{"vendor":"WAGO","product":"WAGO Edge Controller","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]}],"references":["https://cert.vde.com/en/advisories/VDE-2022-054/"],"weaknesses":["CWE-306"],"ingestedAt":"2026-10-29T19:50:32.060Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/3xxx/CVE-2022-3738.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-3738","state":"PUBLISHED","datePublished":"2023-01-19T11:27:51.814Z","dateUpdated":"2025-04-02T14:55:51.603Z","assignerShortName":"CERTVDE","assignerOrgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","dateReserved":"2022-10-28T07:18:40.653Z"},"containers":{"cna":{"title":"WAGO: Missing authentication for config export functionality in multiple products","descriptions":[{"lang":"en","value":"The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull.\n"}],"affected":[{"vendor":"WAGO","product":"Series WAGO PFC100","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]},{"vendor":"WAGO","product":"Series WAGO PFC200","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]},{"vendor":"WAGO","product":"Series WAGO Touch Panel 600 Advanced Line","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]},{"vendor":"WAGO","product":"Series WAGO Touch Panel 600 Marine Line","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]},{"vendor":"WAGO","product":"Series WAGO Touch Panel 600 Standard Line","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]},{"vendor":"WAGO","product":"WAGO Compact Controller CC100","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]},{"vendor":"WAGO","product":"WAGO Edge Controller","defaultStatus":"unaffected","versions":[{"version":"FW16","status":"affected","lessThanOrEqual":"FW22","versionType":"semver"}]}],"references":[{"url":"https://cert.vde.com/en/advisories/VDE-2022-054/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-306","description":"CWE-306 Missing Authentication for Critical Function","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"CERTVDE","orgId":"270ccfa6-a436-4e77-922e-914ec3a9685c","dateUpdated":"2023-11-07T09:43:18.629Z"},"datePublic":"2023-01-12T08:00:00.000Z","impacts":[{"capecId":"CAPEC-1","descriptions":[{"lang":"en","value":"CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"}]}],"source":{"advisory":"VDE-2022-054","defect":["CERT@VDE#64273"],"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://cert.vde.com/en/advisories/VDE-2022-054/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T01:20:57.784Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-02T14:55:30.723734Z","id":"CVE-2022-3738","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-02T14:55:51.603Z"}}]}}}