medium6.1
CVE-2022-45137
The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser.
Impact
The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wago | 751-9301 Firmware | from 16 before 22 Versions 22, 23 |
| Wago | 752-8303\/8000-002 Firmware | from 18 before 22 Versions 22, 23 |
| Wago | Pfc100 Firmware | from 16 before 22 Versions 22, 23 |
| Wago | Pfc200 Firmware | from 16 before 22 Versions 22, 23 |
| Wago | Touch Panel 600 Advanced Firmware | from 16 before 22 Versions 22, 23 |
| Wago | Touch Panel 600 Marine Firmware | from 16 before 22 Versions 22, 23 |
| Wago | Touch Panel 600 Standard Firmware | from 16 before 22 Versions 22, 23 |