CVE-2022-50926
CRITICALWAGO 750-8212 PFC200 G2 2ETH RS - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2022-50926. PoCs published by Momen Eldawakhly.
AI-analyzed exploit summary This exploit demonstrates a privilege escalation vulnerability in WAGO 750-8212 PFC200 G2 2ETH RS by manipulating the user cookie to change the role from 'user' to 'admin'. The attack involves modifying the JSON-encoded user data in the cookie to escalate privileges without authentication.
Description
WAGO 750-8212 PFC200 G2 2ETH RS firmware contains a privilege escalation vulnerability that allows attackers to manipulate user session cookies. Attackers can modify the cookie's 'name' and 'roles' parameters to elevate from ordinary user to administrative privileges without authentication.
Exploits (1)
This exploit demonstrates a privilege escalation vulnerability in WAGO 750-8212 PFC200 G2 2ETH RS by manipulating the user cookie to change the role from 'user' to 'admin'. The attack involves modifying the JSON-encoded user data in the cookie to escalate privileges without authentication.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H