CVE-2022-45139

MEDIUM

Wago 751-9301 Firmware < 22 - Origin Validation Error

Title source: rule

Description

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of confidentiality.

References (1)

[Third Party Advisory] https://cert.vde.com/en/advisories/VDE-2022-060/

Scores

CVSS v3 5.3

EPSS 0.0009

EPSS Percentile 25.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Classification

CWE

CWE-346

Status published

Affected Products (21)

wago/751-9301_firmware < 22

wago/751-9301_firmware

wago/752-8303\/8000-002_firmware < 22

wago/752-8303\/8000-002_firmware

wago/pfc100_firmware < 22

wago/pfc100_firmware

wago/pfc200_firmware < 22

wago/pfc200_firmware

wago/touch_panel_600_advanced_firmware < 22

wago/touch_panel_600_advanced_firmware

... and 6 more

Timeline

Published Feb 27, 2023

Tracked Since Feb 18, 2026