← Database

CVE-2022-45139

MEDIUM CVSS: 5.3 Published: 2023-02-27 Modified: 2026-06-17

Description

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of confidentiality.

Affected Platforms

Wago Pfc200Wago Pfc100Wago Pfc100 FirmwareWago Touch Panel 600 Standard FirmwareWago 751-9301 FirmwareWago 752-8303\/8000-002Wago Touch Panel 600 MarineWago Pfc200 FirmwareWago 752-8303\/8000-002 FirmwareWago Touch Panel 600 Advanced

Weakness Type

CWE-346, CWE-346

References