Lucene search
HistoryFeb 27, 2023 - 3:15 p.m.
CVE-2022-45137
vulnerability
web-based management
configuration
backend
reflected xss
cross-site scripting
confidentiality
integrity
availability
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
27.3%
The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.
Affected configurations
Node
wago751-9301Match-
wago751-9301_firmwareRange16–22
ORwago751-9301_firmwareMatch22-
ORwago751-9301_firmwareMatch23
Node
wago752-8303\/8000-002Match-
wago752-8303\/8000-002_firmwareRange18–22
ORwago752-8303\/8000-002_firmwareMatch22-
ORwago752-8303\/8000-002_firmwareMatch23
Node
wagopfc100Match-
wagopfc100_firmwareRange16–22
ORwagopfc100_firmwareMatch22-
ORwagopfc100_firmwareMatch23
Node
wagopfc200Match-
wagopfc200_firmwareRange16–22
ORwagopfc200_firmwareMatch22-
ORwagopfc200_firmwareMatch23
Node
wagotouch_panel_600_advancedMatch-
wagotouch_panel_600_advanced_firmwareRange16–22
ORwagotouch_panel_600_advanced_firmwareMatch22-
ORwagotouch_panel_600_advanced_firmwareMatch23
Node
wagotouch_panel_600_marineMatch-
wagotouch_panel_600_marine_firmwareRange16–22
ORwagotouch_panel_600_marine_firmwareMatch22-
ORwagotouch_panel_600_marine_firmwareMatch23
Node
wagotouch_panel_600_standardMatch-
wagotouch_panel_600_standard_firmwareRange16–22
ORwagotouch_panel_600_standard_firmwareMatch22-
ORwagotouch_panel_600_standard_firmwareMatch23
References
Related
nessus
nessus
prion
prion
Cross site scripting
2023-02-27 15:15:00
cve
cve
CVE-2022-45137
2023-02-27 15:15:11
cvelist
cvelist
CVE-2022-45137 WAGO: Reflective Cross-Site Scripting
2023-02-27 14:36:03
thn
thn
Researchers Uncover Over a Dozen Security Flaws in Akuvox E11 Smart Intercom
2023-03-13 07:36:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
27.3%
Related for NVD:CVE-2022-45137