CVEvulnerability

CVE-2022-22511

5.4 MEDIUM Published 2022-03-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.

Affected configurations

• wago 750-8100 firmware (>= fw16 < fw22) • wago 750-8101 firmware (>= fw16 < fw22) • wago 750-8102 firmware (>= fw16 < fw22) • wago 751-9301 firmware (>= fw16 < fw22) • wago 750-8202 firmware (>= fw16 < fw22) • wago 762-4205\/8000-002 firmware (>= fw16 < fw22) • wago 762-4206\/8000-002 firmware (>= fw16 < fw22) • wago 762-4305\/8000-002 firmware (>= fw16 < fw22) • wago 762-4306\/8000-002 firmware (>= fw16 < fw22) • wago 762-5205\/8000-001 firmware (>= fw16 < fw22) • wago 762-5206\/8000-001 firmware (>= fw16 < fw22) • wago 762-5305\/8000-002 firmware (>= fw16 < fw22) • wago 762-5306\/8000-002 firmware (>= fw16 < fw22) • wago 762-6301\/8000-002 firmware (>= fw16 < fw22) • wago 762-6302\/8000-002 firmware (>= fw16 < fw22) • wago 762-6303\/8000-002 firmware (>= fw16 < fw22) • wago 762-6304\/8000-002 firmware (>= fw16 < fw22) • wago 750-8102\/025-000 firmware (>= fw16 < fw22) • wago 750-8101\/025-000 firmware (>= fw16 < fw22) • wago 750-82 firmware (>= fw16 < fw22) • wago 750-8202\/000-012 firmware (>= fw16 < fw22) • wago 750-8202\/000-022 firmware (>= fw16 < fw22) • wago 750-8202\/025-001 firmware (>= fw16 < fw22) • wago 750-8202\/025-000 firmware (>= fw16 < fw22) • wago 752-8303\/8000-002 firmware (>= fw16 < fw22)

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References