Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-45139

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of confidentiality.

Published

2023-02-27T15:15:11.407

Last Modified

2024-11-21T07:28:50.013

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-346
  • Type: Primary
    CWE-346
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System wago 751-9301_firmware < 22 Yes
Operating System wago 751-9301_firmware 22 Yes
Operating System wago 751-9301_firmware 23 Yes
Hardware wago 751-9301 - No
Operating System wago 752-8303\/8000-002_firmware < 22 Yes
Operating System wago 752-8303\/8000-002_firmware 22 Yes
Operating System wago 752-8303\/8000-002_firmware 23 Yes
Hardware wago 752-8303\/8000-002 - No
Operating System wago pfc100_firmware < 22 Yes
Operating System wago pfc100_firmware 22 Yes
Operating System wago pfc100_firmware 23 Yes
Hardware wago pfc100 - No
Operating System wago pfc200_firmware < 22 Yes
Operating System wago pfc200_firmware 22 Yes
Operating System wago pfc200_firmware 23 Yes
Hardware wago pfc200 - No
Operating System wago touch_panel_600_advanced_firmware < 22 Yes
Operating System wago touch_panel_600_advanced_firmware 22 Yes
Operating System wago touch_panel_600_advanced_firmware 23 Yes
Hardware wago touch_panel_600_advanced - No
Operating System wago touch_panel_600_marine_firmware < 22 Yes
Operating System wago touch_panel_600_marine_firmware 22 Yes
Operating System wago touch_panel_600_marine_firmware 23 Yes
Hardware wago touch_panel_600_marine - No
Operating System wago touch_panel_600_standard_firmware < 22 Yes
Operating System wago touch_panel_600_standard_firmware 22 Yes
Operating System wago touch_panel_600_standard_firmware 23 Yes
Hardware wago touch_panel_600_standard - No
References