Lucene search

[email protected]CVE-2022-3281

HistoryOct 17, 2022 - 9:15 a.m.

CVE-2022-3281

2022-10-1709:15:12

CWE-440

[email protected]

web.nvd.nist.gov

wago

pfc100

pfc200

touch panel 600

cc100

edge controller

mac-address-filter

bypass

vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.

Affected configurations

NVD

Node

wago750-8100_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8100Match-

Node

wago750-8101_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8101Match-

Node

wago750-8101\/000-010_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8101\/000-010Match-

Node

wago750-8101\/025-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8101\/025-000Match-

Node

wago750-8102_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8102Match-

Node

wago750-8102\/025-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8102\/025-000Match-

Node

wago750-8202\/000-011_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8202\/000-011Match-

Node

wago750-8202\/000-012_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8202\/000-012Match-

Node

wago750-8202\/000-022_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8202\/000-022Match-

Node

wago750-8206_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8206Match-

Node

wago750-8206\/025-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8206\/025-000Match-

Node

wago750-8206\/025-001_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8206\/025-001Match-

Node

wago750-8207_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8207Match-

Node

wago750-8207\/025-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8207\/025-000Match-

Node

wago750-8207\/025-001_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8207\/025-001Match-

Node

wago750-8208_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8208Match-

Node

wago750-8208\/025-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8208\/025-000Match-

Node

wago750-8208\/025-001_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8208\/025-001Match-

Node

wago750-8210_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8210Match-

Node

wago750-8210\/025-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8210\/025-000Match-

Node

wago750-8211_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8211Match-

Node

wago750-8212_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8212Match-

Node

wago750-8212\/000-100_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8212\/000-100Match-

Node

wago750-8212\/025-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8212\/025-000Match-

Node

wago750-8212\/025-001_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8212\/025-001Match-

Node

wago750-8212\/025-002_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8212\/025-002Match-

Node

wago750-8213_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8213Match-

Node

wago750-8214_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8214Match-

Node

wago750-8215_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8215Match-

Node

wago750-8216_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8216Match-

Node

wago750-8216\/025-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8216\/025-000Match-

Node

wago750-8216\/025-001_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8216\/025-001Match-

Node

wago750-8202\/040-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8202\/040-000Match-

Node

wago750-8206\/040-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8206\/040-000Match-

Node

wago750-8206\/040-001_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8206\/040-001Match-

Node

wago750-8210\/040-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8210\/040-000Match-

Node

wago750-8211\/040-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8211\/040-000Match-

Node

wago750-8212\/040-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8212\/040-000Match-

Node

wago750-8212\/040-001_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8212\/040-001Match-

Node

wago750-8212\/040-010_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8212\/040-010Match-

Node

wago750-8213\/040-010_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8213\/040-010Match-

Node

wago750-8216\/040-000_firmwareRange03.01.07\(13\)–03.10.08\(22\)

AND

wago750-8216\/040-000Match-

Node

wago750-8217_firmwareRange03.04.10\(16\)–03.10.08\(22\)

AND

wago750-8217Match-

Node

wago750-8217\/025-000_firmwareRange03.04.10\(16\)–03.10.08\(22\)

AND

wago750-8217\/025-000Match-

Node

wago750-8217\/600-000_firmwareRange03.04.10\(16\)–03.10.08\(22\)

AND

wago750-8217\/600-000Match-

Node

wago750-8217\/625-000_firmwareRange03.04.10\(16\)–03.10.08\(22\)

AND

wago750-8217\/625-000Match-

Node

wago762-4201\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4201\/8000-001Match-

Node

wago762-4202\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4202\/8000-001Match-

Node

wago762-4203\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4203\/8000-001Match-

Node

wago762-4204\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4204\/8000-001Match-

Node

wago762-4205\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4205\/8000-001Match-

Node

wago762-4206\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4206\/8000-001Match-

Node

wago762-4301\/8000-002_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4301\/8000-002Match-

Node

wago762-4302\/8000-002_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4302\/8000-002Match-

Node

wago762-4303\/8000-002_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4303\/8000-002Match-

Node

wago762-4304\/8000-002_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4304\/8000-002Match-

Node

wago762-4101_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4101Match-

Node

wago762-4102_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4102Match-

Node

wago762-4103_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4103Match-

Node

wago762-4104_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-4104Match-

Node

wago762-5203\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-5203\/8000-001Match-

Node

wago762-5204\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-5204\/8000-001Match-

Node

wago762-5205\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-5205\/8000-001Match-

Node

wago762-5206\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-5206\/8000-001Match-

Node

wago762-5303\/8000-002_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-5303\/8000-002Match-

Node

wago762-5304\/8000-002_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-5304\/8000-002Match-

Node

wago762-5305\/8000-002_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-5305\/8000-002Match-

Node

wago762-5306\/8000-002_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-5306\/8000-002Match-

Node

wago762-6201\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-6201\/8000-001Match-

Node

wago762-6202\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-6202\/8000-001Match-

Node

wago762-6203\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-6203\/8000-001Match-

Node

wago762-6204\/8000-001_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-6204\/8000-001Match-

Node

wago762-6301\/8000-002_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-6301\/8000-002Match-

Node

wago762-6302\/8000-002_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-6302\/8000-002Match-

Node

wago762-6303\/8000-002_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-6303\/8000-002Match-

Node

wago762-6304\/8000-002_firmwareRange03.01.07\(13\)–03.10.09\(22\)

AND

wago762-6304\/8000-002Match-

Node

wago752-8303\/8000-002_firmwareRange03.06.09\(18\)–03.10.09\(22\)

AND

wago752-8303\/8000-002Match-

Node

wago751-9301_firmwareRange03.07.17\(19\)–03.09.08\(21\)

AND

wago751-9301Match-

CPENameOperatorVersion
wago:750-8100_firmwarewago 750-8100 firmwarele03.10.08\(22\)

CPE	Name	Operator	Version
wago:750-8100_firmware	wago 750-8100 firmware	le	03.10.08\(22\)

CNA Affected

[
  {
    "vendor": "WAGO",
    "product": "750-81xx/xxx-xxx Series PFC100/PFC200",
    "versions": [
      {
        "version": "03.01.07(13)",
        "status": "affected",
        "lessThanOrEqual": "03.10.08(22)",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "WAGO",
    "product": "750-8217/xxx-xxx Series PFC100/PFC200",
    "versions": [
      {
        "version": "03.04.10(16)",
        "status": "affected",
        "lessThanOrEqual": "03.10.08(22)",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "WAGO",
    "product": "750-82xx/xxx-xxx Series PFC100/PFC200",
    "versions": [
      {
        "version": "03.01.07(13)",
        "status": "affected",
        "lessThanOrEqual": "03.10.08(22)",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "WAGO",
    "product": "Compact Controller CC100",
    "versions": [
      {
        "version": "03.07.17(19)",
        "status": "affected",
        "lessThanOrEqual": "03.09.08(21)",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "WAGO",
    "product": "762-4xxx Series Touch Panel 600",
    "versions": [
      {
        "version": "03.01.07(13)",
        "status": "affected",
        "lessThanOrEqual": "03.10.09(22)",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "WAGO",
    "product": "762-5xxx Series Touch Panel 600",
    "versions": [
      {
        "version": "03.01.07(13)",
        "status": "affected",
        "lessThanOrEqual": "03.10.09(22)",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "WAGO",
    "product": "762-6xxx Series Touch Panel 600",
    "versions": [
      {
        "version": "03.01.07(13)",
        "status": "affected",
        "lessThanOrEqual": "03.10.09(22)",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "WAGO",
    "product": "752-8303/8000-002 Edge Controller",
    "versions": [
      {
        "version": "03.06.09(18)",
        "status": "affected",
        "lessThanOrEqual": "03.10.09(22)",
        "versionType": "custom"
      }
    ]
  }
]

References

cert.vde.com/en/advisories/VDE-2022-042/

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

Related for CVE-2022-3281

cvelist1 nessus1 nvd1 prion1