Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Wago Multiple products - Loss of MAC-Address-Filtering after reboot (CVE-2022-3281)

🗓️ 21 Oct 2022 00:00:00Reported by TenableType 
nessus
 nessus🔗 www.tenable.com👁 44 Views

Wago products - Loss of MAC-Address-Filtering vulnerability (CVE-2022-3281

Related
Refs
Code
ReporterTitlePublishedViews
Family
BDU FSTEC		The vulnerability of microprogrammed software in WAGO PFC100/PFC200, CC100, Edge Controller programmable logic controllers, and WAGO Touch Panel 600 sensor panels, related to improperly implemented MAC filtering functions, allows attackers to circumvent security restrictions.
3 Jan 202300:00
–bdu_fstec
Circl		CVE-2022-3281
17 Oct 202212:12
–circl
CNNVD		多款WAGO产品安全漏洞
17 Oct 202200:00
–cnnvd
CVE		CVE-2022-3281
17 Oct 202208:20
–cve
Cvelist		CVE-2022-3281 WAGO: multiple products - Loss of MAC-Address-Filtering after reboot
17 Oct 202208:20
–cvelist
EUVD		EUVD-2022-42677
3 Oct 202520:07
–euvd
NVD		CVE-2022-3281
17 Oct 202209:15
–nvd
OSV		CVE-2022-3281
17 Oct 202209:15
–osv
Prion		Code injection
17 Oct 202209:15
–prion
Positive Technologies		PT-2022-6077 · Wago · Compact Controller Cc100 +3
17 Oct 202200:00
–ptsecurity
Rows per page
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(500703);
  script_version("1.6");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/10/09");

  script_cve_id("CVE-2022-3281");

  script_name(english:"Wago Multiple products - Loss of MAC-Address-Filtering after reboot (CVE-2022-3281)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are
prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the
network that should be protected by the MAC address filter.

  - WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in
    multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote
    attacker to circumvent the reach the network that should be protected by the MAC address filter.
    (CVE-2022-3281)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"https://cert.vde.com/en/advisories/VDE-2022-042/");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2022-3281");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(440);

  script_set_attribute(attribute:"vuln_publication_date", value:"2022/10/17");
  script_set_attribute(attribute:"patch_publication_date", value:"2022/10/17");
  script_set_attribute(attribute:"plugin_publication_date", value:"2022/10/21");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8100_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8101%2f000-010_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8101%2f025-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8101_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8102%2f025-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8102_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8202%2f000-011_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8202%2f000-012_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8202%2f000-022_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8202%2f040-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8206%2f025-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8206%2f025-001_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8206%2f040-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8206%2f040-001_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8206_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8207%2f025-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8207%2f025-001_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8207_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8208%2f025-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8208%2f025-001_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8208_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8210%2f025-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8210%2f040-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8210_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8211%2f040-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8211_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8212%2f000-100_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8212%2f025-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8212%2f025-001_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8212%2f025-002_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8212%2f040-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8212%2f040-001_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8212%2f040-010_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8212_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8213%2f040-010_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8213_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8214_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8215_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8216%2f025-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8216%2f025-001_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8216%2f040-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8216_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8217%2f025-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8217%2f600-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8217%2f625-000_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:750-8217_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:751-9301_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:wago:752-8303%2f8000-002_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2022-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Wago");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Wago');

var asset = tenable_ot::assets::get(vendor:'Wago');

var vuln_cpes = {
    "cpe:/o:wago:750-8100_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC100"},
    "cpe:/o:wago:750-8101_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC100"},
    "cpe:/o:wago:750-8101%2f000-010_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC100"},
    "cpe:/o:wago:750-8101%2f025-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC100"},
    "cpe:/o:wago:750-8102_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC100"},
    "cpe:/o:wago:750-8102%2f025-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC100"},
    "cpe:/o:wago:750-8202%2f000-011_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8202%2f000-012_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8202%2f000-022_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8206_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8206%2f025-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8206%2f025-001_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8207_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8207%2f025-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8207%2f025-001_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8208_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8208%2f025-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8208%2f025-001_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8210_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8210%2f025-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8211_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8212_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8212%2f000-100_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8212%2f025-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8212%2f025-001_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8212%2f025-002_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8213_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8214_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8215_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8216_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8216%2f025-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8216%2f025-001_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8202%2f040-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8206%2f040-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8206%2f040-001_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8210%2f040-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8211%2f040-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8212%2f040-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8212%2f040-001_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8212%2f040-010_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8213%2f040-010_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8216%2f040-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.01.07\(13\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8217_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.04.10\(16\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8217%2f025-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.04.10\(16\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8217%2f600-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.04.10\(16\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:750-8217%2f625-000_firmware" :
        {"versionEndIncluding" : "03.10.08\(22\)", "versionStartIncluding" : "03.04.10\(16\)", "family" : "ControllerPFC200"},
    "cpe:/o:wago:752-8303%2f8000-002_firmware" :
        {"versionEndIncluding" : "03.10.09\(22\)", "versionStartIncluding" : "03.06.09\(18\)", "family" : "EdgeController"},
    "cpe:/o:wago:751-9301_firmware" :
        {"versionEndIncluding" : "03.09.08\(21\)", "versionStartIncluding" : "03.07.17\(19\)", "family" : "CompactController"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
09 Oct 2023 00:00Current
7.5High risk
Vulners AI Score7.5
CVSS 3.17.5
EPSS0.00656
SSVC
wagomac-address-filteringvulnerabilityremote attackernetworktenable.ot
44