medium5.4
CVE-2022-22511
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks.
Impact
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wago | 750-8100 Firmware | from fw16 before fw22 |
| Wago | 750-8101 Firmware | from fw16 before fw22 |
| Wago | 750-8102 Firmware | from fw16 before fw22 |
| Wago | 751-9301 Firmware | from fw16 before fw22 |
| Wago | 750-8202 Firmware | from fw16 before fw22 |
| Wago | 762-4205\/8000-002 Firmware | from fw16 before fw22 |
| Wago | 762-4206\/8000-002 Firmware | from fw16 before fw22 |
| Wago | 762-4305\/8000-002 Firmware | from fw16 before fw22 |
| Wago | 762-4306\/8000-002 Firmware | from fw16 before fw22 |
| Wago | 762-5205\/8000-001 Firmware | from fw16 before fw22 |
| Wago | 762-5206\/8000-001 Firmware | from fw16 before fw22 |
| Wago | 762-5305\/8000-002 Firmware | from fw16 before fw22 |