Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-3738

The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull.

Published

2023-01-19T12:15:11.213

Last Modified

2024-11-21T07:20:08.493

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-306
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System wago pfc100_firmware ≤ 22 Yes
Hardware wago pfc100 - No
Operating System wago pfc200_firmware ≤ 22 Yes
Hardware wago pfc200 - No
Operating System wago touch_panel_600_advanced_firmware ≤ 22 Yes
Hardware wago touch_panel_600_advanced - No
Operating System wago touch_panel_600_standard_firmware ≤ 22 Yes
Hardware wago touch_panel_600_standard - No
Operating System wago touch_panel_600_marine_firmware ≤ 22 Yes
Hardware wago touch_panel_600_marine - No
Operating System wago cc100_firmware ≤ 22 Yes
Hardware wago cc100 - No
Operating System wago edge_controller_firmware ≤ 22 Yes
Hardware wago edge_controller - No
References