VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 27, 2023· Updated Jun 17, 2026

CVE-2022-45138

CVE-2022-45138

Description

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

29
  • Wago/751 9301 Firmware3 versions
    cpe:2.3:o:wago:751-9301_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:wago:751-9301_firmware:*:*:*:*:*:*:*:*range: >=16,<22
    • cpe:2.3:o:wago:751-9301_firmware:22:-:*:*:*:*:*:*
    • cpe:2.3:o:wago:751-9301_firmware:23:*:*:*:*:*:*:*
  • Wago/752 8303\/8000 002 Firmware3 versions
    cpe:2.3:o:wago:752-8303\/8000-002_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:wago:752-8303\/8000-002_firmware:*:*:*:*:*:*:*:*range: >=18,<22
    • cpe:2.3:o:wago:752-8303\/8000-002_firmware:22:-:*:*:*:*:*:*
    • cpe:2.3:o:wago:752-8303\/8000-002_firmware:23:*:*:*:*:*:*:*
  • Wago/Pfc100 Firmware3 versions
    cpe:2.3:o:wago:pfc100_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:wago:pfc100_firmware:*:*:*:*:*:*:*:*range: >=16,<22
    • cpe:2.3:o:wago:pfc100_firmware:22:-:*:*:*:*:*:*
    • cpe:2.3:o:wago:pfc100_firmware:23:*:*:*:*:*:*:*
  • Wago/Pfc200 Firmware3 versions
    cpe:2.3:o:wago:pfc200_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:wago:pfc200_firmware:*:*:*:*:*:*:*:*range: >=16,<22
    • cpe:2.3:o:wago:pfc200_firmware:22:-:*:*:*:*:*:*
    • cpe:2.3:o:wago:pfc200_firmware:23:*:*:*:*:*:*:*
  • Wago/Touch Panel 600 Advanced Firmware3 versions
    cpe:2.3:o:wago:touch_panel_600_advanced_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:wago:touch_panel_600_advanced_firmware:*:*:*:*:*:*:*:*range: >=16,<22
    • cpe:2.3:o:wago:touch_panel_600_advanced_firmware:22:-:*:*:*:*:*:*
    • cpe:2.3:o:wago:touch_panel_600_advanced_firmware:23:*:*:*:*:*:*:*
  • Wago/Touch Panel 600 Marine Firmware3 versions
    cpe:2.3:o:wago:touch_panel_600_marine_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:wago:touch_panel_600_marine_firmware:*:*:*:*:*:*:*:*range: >=16,<22
    • cpe:2.3:o:wago:touch_panel_600_marine_firmware:22:-:*:*:*:*:*:*
    • cpe:2.3:o:wago:touch_panel_600_marine_firmware:23:*:*:*:*:*:*:*
  • Wago/Touch Panel 600 Standard Firmware3 versions
    cpe:2.3:o:wago:touch_panel_600_standard_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:wago:touch_panel_600_standard_firmware:*:*:*:*:*:*:*:*range: >=16,<22
    • cpe:2.3:o:wago:touch_panel_600_standard_firmware:22:-:*:*:*:*:*:*
    • cpe:2.3:o:wago:touch_panel_600_standard_firmware:23:*:*:*:*:*:*:*
  • VDE/Devicellm-create
  • Wago/Compact Controller CC100cpe-rescue
    Range: FW16
  • WAGO/Edge Controller (752-8303/8000-002)v5
    Range: FW18
  • WAGO/PFC100 (750-81xx/xxx-xxx)v5
    Range: FW16
  • Wago/750-8202/PFC200cpe-rescue
    Range: FW16
  • WAGO/Touch Panel 600 Advanced Line (762-5xxx)v5
    Range: FW16
  • WAGO/Touch Panel 600 Marine Line (762-6xxx)v5
    Range: FW16
  • Wago/Series Wago Touch Panel 600 Standard Linecpe-rescue
    Range: FW16

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.