Compact Controller CC100 (751-9301)

3 results · Clear filters · Feed

• Medium 5.3
  CVE-2022-45139

  WAGO: Origin validation error through CORS misconfiguration

  A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. A…

  WAGO Edge Controller (752-8303/8000-002) Touch Panel 600 Marine Line (762-6xxx) Compact Controller CC100 (751-9301) Browsers ICS / OT
  Feb 27, 2023
• Medium 6.1
  CVE-2022-45137

  WAGO: Reflective Cross-Site Scripting

  The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.

  WAGO Edge Controller (752-8303/8000-002) Compact Controller CC100 (751-9301) Touch Panel 600 Advanced Line (762-5xxx) Browsers ICS / OT
  Feb 27, 2023
• Medium 5.4
  CVE-2022-22511

  WAGO PLCs WBM vulnerable to reflected XSS

  Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been co…

  WAGO Edge Controller (752-8303/8000-002) Compact Controller CC100 (751-9301) Series Touch Panel 600 Advanced Line (762-5xxx) Browsers ICS / OT
  Mar 9, 2022