VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 27, 2023· Updated Mar 10, 2025

WAGO: Origin validation error through CORS misconfiguration

CVE-2022-45139

Description

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of confidentiality.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • WAGO/Compact Controller CC100 (751-9301)v5
    Range: FW16
  • WAGO/Edge Controller (752-8303/8000-002)v5
    Range: FW18
  • WAGO/PFC100 (750-81xx/xxx-xxx)v5
    Range: FW16
  • Wago/750-8202/PFC200cpe-rescue
    Range: FW16
  • WAGO/Touch Panel 600 Advanced Line (762-5xxx)v5
    Range: FW16
  • WAGO/Touch Panel 600 Marine Line (762-6xxx)v5
    Range: FW16
  • WAGO/Touch Panel 600 Standard Line (762-4xxx)v5
    Range: FW16

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.