CVE-2022-45137

🗓️ 27 Feb 2023 14:36:03Reported by CERTVDEType

The web-based management configuration backend is vulnerable to reflected XSS attacks, impacting confidentiality and integrity

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the server-side components of the web interface for controlling microprogrammed logic controllers like WAGO PFC100/PFC200, CC100, Edge Controller, as well as the microprogrammed software for sensor panels like WAGO Touch Panel 600, allows attackers to carry out cross-site scripting attacks.	28 Mar 202300:00	–	bdu_fstec
CNNVD	多款WAGO产品跨站脚本漏洞	27 Feb 202300:00	–	cnnvd
Cvelist	CVE-2022-45137 WAGO: Reflective Cross-Site Scripting	27 Feb 202314:36	–	cvelist
EUVD	EUVD-2022-48052	3 Oct 202520:07	–	euvd
NVD	CVE-2022-45137	27 Feb 202315:15	–	nvd
Prion	Cross site scripting	27 Feb 202315:15	–	prion
Positive Technologies	PT-2023-2008 · Wago · Wago Cc100 +3	13 Feb 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-45137	22 May 202521:46	–	redhatcve
Tenable Nessus	Wago Multiple Products Web-based Management Cross-site Scripting (CVE-2022-45137)	9 Mar 202300:00	–	nessus
The Hacker News	Researchers Uncover Over a Dozen Security Flaws in Akuvox E11 Smart Intercom	13 Mar 202307:36	–	thn

NVD

Vulners

Node

wago 751-9301_firmwareRange16–22

wago 751-9301_firmwareMatch22-

wago 751-9301_firmwareMatch23

AND

wago 751-9301Match-

Node

wago 752-8303/8000-002_firmwareRange18–22

wago 752-8303/8000-002_firmwareMatch22-

wago 752-8303/8000-002_firmwareMatch23

AND

wago 752-8303/8000-002Match-

Node

wago pfc100_firmwareRange16–22

wago pfc100_firmwareMatch22-

wago pfc100_firmwareMatch23

AND

wago pfc100Match-

Node

wago pfc200_firmwareRange16–22

wago pfc200_firmwareMatch22-

wago pfc200_firmwareMatch23

AND

wago pfc200Match-

Node

wago touch_panel_600_advanced_firmwareRange16–22

wago touch_panel_600_advanced_firmwareMatch22-

wago touch_panel_600_advanced_firmwareMatch23

AND

wago touch_panel_600_advancedMatch-

Node

wago touch_panel_600_marine_firmwareRange16–22

wago touch_panel_600_marine_firmwareMatch22-

wago touch_panel_600_marine_firmwareMatch23

AND

wago touch_panel_600_marineMatch-

Node

wago touch_panel_600_standard_firmwareRange16–22

wago touch_panel_600_standard_firmwareMatch22-

wago touch_panel_600_standard_firmwareMatch23

AND

wago touch_panel_600_standardMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Compact Controller CC100 (751-9301)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "FW22 Patch 1"
      },
      {
        "status": "affected",
        "version": "FW23"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Edge Controller (752-8303/8000-002)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "FW22",
        "status": "affected",
        "version": "FW18",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "FW22 Patch 1"
      },
      {
        "status": "affected",
        "version": "FW23"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PFC100 (750-81xx/xxx-xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "FW22 Patch 1"
      },
      {
        "status": "affected",
        "version": "FW23"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PFC200 (750-82xx/xxx-xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "FW22 Patch 1"
      },
      {
        "status": "affected",
        "version": "FW23"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Touch Panel 600 Advanced Line (762-5xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "FW22 Patch 1"
      },
      {
        "status": "affected",
        "version": "FW23"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Touch Panel 600 Marine Line (762-6xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "FW22 Patch 1"
      },
      {
        "status": "affected",
        "version": "FW23"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Touch Panel 600 Standard Line (762-4xxx)",
    "vendor": "WAGO",
    "versions": [
      {
        "lessThan": "FW22",
        "status": "affected",
        "version": "FW16",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "FW22 Patch 1"
      },
      {
        "status": "affected",
        "version": "FW23"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2022-060/

17 Jun 2026 05:09Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.1

EPSS0.00375

CWE-79