Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-45137

The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.

Published

2023-02-27T15:15:11.203

Last Modified

2024-11-21T07:28:49.723

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System wago 751-9301_firmware < 22 Yes
Operating System wago 751-9301_firmware 22 Yes
Operating System wago 751-9301_firmware 23 Yes
Hardware wago 751-9301 - No
Operating System wago 752-8303\/8000-002_firmware < 22 Yes
Operating System wago 752-8303\/8000-002_firmware 22 Yes
Operating System wago 752-8303\/8000-002_firmware 23 Yes
Hardware wago 752-8303\/8000-002 - No
Operating System wago pfc100_firmware < 22 Yes
Operating System wago pfc100_firmware 22 Yes
Operating System wago pfc100_firmware 23 Yes
Hardware wago pfc100 - No
Operating System wago pfc200_firmware < 22 Yes
Operating System wago pfc200_firmware 22 Yes
Operating System wago pfc200_firmware 23 Yes
Hardware wago pfc200 - No
Operating System wago touch_panel_600_advanced_firmware < 22 Yes
Operating System wago touch_panel_600_advanced_firmware 22 Yes
Operating System wago touch_panel_600_advanced_firmware 23 Yes
Hardware wago touch_panel_600_advanced - No
Operating System wago touch_panel_600_marine_firmware < 22 Yes
Operating System wago touch_panel_600_marine_firmware 22 Yes
Operating System wago touch_panel_600_marine_firmware 23 Yes
Hardware wago touch_panel_600_marine - No
Operating System wago touch_panel_600_standard_firmware < 22 Yes
Operating System wago touch_panel_600_standard_firmware 22 Yes
Operating System wago touch_panel_600_standard_firmware 23 Yes
Hardware wago touch_panel_600_standard - No
References