CVE-2022-3738

🗓️ 19 Jan 2023 11:27:51Reported by CERTVDEType

CVE-2022-3738 allows remote attacker to download sensitive backup fil

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-3738	19 Jan 202314:21	–	circl
CNNVD	WAGO 访问控制错误漏洞	19 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-3738 WAGO: Missing authentication for config export functionality in multiple products	19 Jan 202311:27	–	cvelist
EUVD	EUVD-2022-43094	3 Oct 202520:07	–	euvd
NVD	CVE-2022-3738	19 Jan 202312:15	–	nvd
OSV	CVE-2022-3738	19 Jan 202312:15	–	osv
Prion	Information disclosure	19 Jan 202312:15	–	prion
Positive Technologies	PT-2023-13534 · Wago · Wago Series Pfc100 +13	19 Jan 202300:00	–	ptsecurity
Tenable Nessus	Wago Multiple Products Missing Authentication for Critical Function (CVE-2022-3738)	29 Mar 202300:00	–	nessus
Vulnrichment	CVE-2022-3738 WAGO: Missing authentication for config export functionality in multiple products	19 Jan 202311:27	–	vulnrichment

NVD

Vulners

Node

wago pfc100_firmwareRange16–22

AND

wago pfc100Match-

Node

wago pfc200_firmwareRange16–22

AND

wago pfc200Match-

Node

wago touch_panel_600_advanced_firmwareRange16–22

AND

wago touch_panel_600_advancedMatch-

Node

wago touch_panel_600_standard_firmwareRange16–22

AND

wago touch_panel_600_standardMatch-

Node

wago touch_panel_600_marine_firmwareRange16–22

AND

wago touch_panel_600_marineMatch-

Node

wago cc100_firmwareRange16–22

AND

wago cc100Match-

Node

wago edge_controller_firmwareRange16–22

AND

wago edge_controllerMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Series WAGO PFC100",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Series WAGO PFC200",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Series WAGO Touch Panel 600 Advanced Line",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Series WAGO Touch Panel 600 Marine Line",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Series WAGO Touch Panel 600 Standard Line",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WAGO Compact Controller CC100",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WAGO Edge Controller",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThanOrEqual": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2022-054/

17 Jun 2026 05:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.9

EPSS0.00625

SSVC

CWE-306