CVE-2022-22511

🗓️ 09 Mar 2022 19:38:43Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 92 Views

Various configuration pages vulnerable to reflected XSS attacks. Authorized attacker with user privileges can access confidential information

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-22511	9 Mar 202207:00	–	attackerkb
Circl	CVE-2022-22511	9 Mar 202222:15	–	circl
CNNVD	WAGO PLC 跨站脚本漏洞	9 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-22511 WAGO PLCs WBM vulnerable to reflected XSS	9 Mar 202219:38	–	cvelist
EUVD	EUVD-2022-27657	3 Oct 202520:07	–	euvd
NVD	CVE-2022-22511	9 Mar 202220:15	–	nvd
OSV	CVE-2022-22511	9 Mar 202220:15	–	osv
Prion	Cross site scripting	9 Mar 202220:15	–	prion
Tenable Nessus	Wago Multiple products - Web-Based Management Cross-site Scripting (CVE-2022-22511)	21 Jul 202200:00	–	nessus

NVD

Vulners

Node

wago 750-8100_firmwareRangefw16–fw22

AND

wago 750-8100Match-

Node

wago 750-8101_firmwareRangefw16–fw22

AND

wago 750-8101Match-

Node

wago 750-8102_firmwareRangefw16–fw22

AND

wago 750-8102Match-

Node

wago 751-9301_firmwareRangefw16–fw22

AND

wago 751-9301Match-

Node

wago 750-8202_firmwareRangefw16–fw22

AND

wago 750-8202Match-

Node

wago 762-4205/8000-002_firmwareRangefw16–fw22

AND

wago 762-4205/8000-002Match-

Node

wago 762-4206/8000-002_firmwareRangefw16–fw22

AND

wago 762-4206/8000-002Match-

Node

wago 762-4305/8000-002_firmwareRangefw16–fw22

AND

wago 762-4305/8000-002Match-

Node

wago 762-4306/8000-002_firmwareRangefw16–fw22

AND

wago 762-4306/8000-002Match-

Node

wago 762-5205/8000-001_firmwareRangefw16–fw22

AND

wago 762-5205/8000-001Match-

Node

wago 762-5206/8000-001_firmwareRangefw16–fw22

AND

wago 762-5206/8000-001Match-

Node

wago 762-5305/8000-002_firmwareRangefw16–fw22

AND

wago 762-5305/8000-002Match-

Node

wago 762-5306/8000-002_firmwareRangefw16–fw22

AND

wago 762-5306/8000-002Match-

Node

wago 762-6301/8000-002_firmwareRangefw16–fw22

AND

wago 762-6301/8000-002Match-

Node

wago 762-6302/8000-002_firmwareRangefw16–fw22

AND

wago 762-6302/8000-002Match-

Node

wago 762-6303/8000-002_firmwareRangefw16–fw22

AND

wago 762-6303/8000-002Match-

Node

wago 762-6304/8000-002_firmwareRangefw16–fw22

AND

wago 762-6304/8000-002Match-

Node

wago 750-8102/025-000_firmwareRangefw16–fw22

AND

wago 750-8102/025-000Match-

Node

wago 750-8101/025-000_firmwareRangefw16–fw22

AND

wago 750-8102/025-000Match-

Node

wago 750-82_firmwareRangefw16–fw22

AND

wago 750-82Match-

Node

wago 750-8202/000-012_firmwareRangefw16–fw22

AND

wago 750-8202/000-012Match-

Node

wago 750-8202/000-022_firmwareRangefw16–fw22

AND

wago 750-8202/000-022Match-

Node

wago 750-8202/025-001_firmwareRangefw16–fw22

AND

wago 750-8202/025-001Match-

Node

wago 750-8202/025-000_firmwareRangefw16–fw22

AND

wago 750-8202/025-000Match-

Node

wago 752-8303/8000-002_firmwareRangefw16–fw22

AND

wago 752-8303/8000-002Match-

[
  {
    "product": "Compact Controller CC100 (751-9301)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Edge Controller (752-8303/8000-002)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Series PFC100 (750-81xx/xxx-xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Series PFC200 (750-82xx/xxx-xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Series Touch Panel 600 Advanced Line (762-5xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "status": "affected",
        "version": "FW16 FW22"
      }
    ]
  },
  {
    "product": "Series Touch Panel 600 Marine Line (762-6xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "status": "affected",
        "version": "FW16 FW22"
      }
    ]
  },
  {
    "product": "Series Touch Panel 600 Standard Line (762-4xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "status": "affected",
        "version": "FW16 FW22"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2022-004/

21 Nov 2024 06:46Current

5.4Medium risk

Vulners AI Score5.4

CVSS 23.5

CVSS 3.15.4

EPSS0.00094

CWE-79