CVE-2022-50926

CRITICAL

WAGO 750-8212 PFC200 G2 2ETH RS - Privilege Escalation

Title source: llm

Description

WAGO 750-8212 PFC200 G2 2ETH RS firmware contains a privilege escalation vulnerability that allows attackers to manipulate user session cookies. Attackers can modify the cookie's 'name' and 'roles' parameters to elevate from ordinary user to administrative privileges without authentication.

Exploits (1)

exploitdb WORKING POC

by Momen Eldawakhly · textremotehardware

https://www.exploit-db.com/exploits/50793

View Code ZIP pw:eip

References (3)

[Various Sources] https://www.wago.com

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/50793

[Third Party Advisory] https://www.vulncheck.com/advisories/wago-pfc-g-eth-rs-privilege-escalation

Scores

CVSS v3 9.8

EPSS 0.0012

EPSS Percentile 30.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-565

Status published

Products (1)

Wago/WAGO 750-8212 PFC200 Firmware version 03.05.10(17)

Published Jan 13, 2026

Tracked Since Feb 18, 2026