← Back

CVE-2022-22511

nvd nist
Published: Mar 9, 2022Modified: Jun 17, 2026

JSON object

Loading...
5.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.3 / Impact: 2.7
Source: NVD

Description

Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.

Affected (25)

Wago
25 products
750 8100 Firmware
750 8101 Firmware
750 8102 Firmware
751 9301 Firmware
750 8202 Firmware
762 4205/8000 002 Firmware
762 4206/8000 002 Firmware
762 4305/8000 002 Firmware
762 4306/8000 002 Firmware
762 5205/8000 001 Firmware
762 5206/8000 001 Firmware
762 5305/8000 002 Firmware
762 5306/8000 002 Firmware
762 6301/8000 002 Firmware
762 6302/8000 002 Firmware
762 6303/8000 002 Firmware
762 6304/8000 002 Firmware
750 8102/025 000 Firmware
750 8101/025 000 Firmware
750 82 Firmware
750 8202/000 012 Firmware
750 8202/000 022 Firmware
750 8202/025 001 Firmware
750 8202/025 000 Firmware
752 8303/8000 002 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
750 8100 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
750 8100
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
750 8101 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
750 8101
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
750 8102 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
750 8102
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
751 9301 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
751 9301
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
750 8202 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
750 8202
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
762 4205/8000 002 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
762 4205/8000 002
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
762 4206/8000 002 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
762 4206/8000 002
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
762 4305/8000 002 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
762 4305/8000 002
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
762 4306/8000 002 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
762 4306/8000 002
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
762 5205/8000 001 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
762 5205/8000 001
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
762 5206/8000 001 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
762 5206/8000 001
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
762 5305/8000 002 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
762 5305/8000 002
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
762 5306/8000 002 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
762 5306/8000 002
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
762 6301/8000 002 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
762 6301/8000 002
All versions
Configuration O
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
762 6302/8000 002 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
762 6302/8000 002
All versions
Configuration P
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
762 6303/8000 002 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
762 6303/8000 002
All versions
Configuration Q
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
762 6304/8000 002 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
762 6304/8000 002
All versions
Configuration R
1 vulnerable
Vulnerable SoftwareAffected Versions
750 8102/025 000 Firmware
From fw16 to fw22
Configuration S
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
750 8101/025 000 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
750 8102/025 000
All versions
Configuration T
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
750 82 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
750 82
All versions
Configuration U
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
750 8202/000 012 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
750 8202/000 012
All versions
Configuration V
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
750 8202/000 022 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
750 8202/000 022
All versions
Configuration W
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
750 8202/025 001 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
750 8202/025 001
All versions
Configuration X
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
750 8202/025 000 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
750 8202/025 000
All versions
Configuration Y
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
752 8303/8000 002 Firmware
From fw16 to fw22
Running on/withPlatform Versions
Wago
752 8303/8000 002
All versions

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

Source: info@cert.vde.com
MitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party Advisory

Timeline

No history available yet.