CVE-2022-3843

Published: Feb 16, 2023Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system information and configure a limited set of parameters.

Affected (1)

Products: Wago: 852 111/000 001 Firmware

Wago

1 product

852 111/000 001 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wago 852 111/000 001 Firmware	Version 01

Running on/with	Platform Versions
Wago 852 111/000 001	All versions

Related CWEs

CWE-912

Hidden Functionality

The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.

References (2)

https://cert.vde.com/en/advisories/VDE-2022-055/

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/en/advisories/VDE-2022-055/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.