medium5.3
CVE-2022-45139
A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver.
Impact
A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of confidentiality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wago | 751-9301 Firmware | from 16 before 22 Versions 22, 23 |
| Wago | 752-8303\/8000-002 Firmware | from 18 before 22 Versions 22, 23 |
| Wago | Pfc100 Firmware | from 16 before 22 Versions 22, 23 |
| Wago | Pfc200 Firmware | from 16 before 22 Versions 22, 23 |
| Wago | Touch Panel 600 Advanced Firmware | from 16 before 22 Versions 22, 23 |
| Wago | Touch Panel 600 Marine Firmware | from 16 before 22 Versions 22, 23 |
| Wago | Touch Panel 600 Standard Firmware | from 16 before 22 Versions 22, 23 |