CVE-2022-45138

🗓️ 27 Feb 2023 15:15:11Reported by [email protected]Type

nvd🔗 web.nvd.nist.gov👁 46 Views

The web-based management configuration backend allows unauthenticated users to access the API, leading to potential device compromise

Reporter	Title	Published	Views	Family All 18
BDU FSTEC	WAGO PLC Code Execution	28 Feb 202300:00	–	bdu_fstec
Circl	CVE-2022-45138	6 Mar 202317:00	–	circl
CNNVD	Multiple WAGO products have access control error vulnerabilities	27 Feb 202300:00	–	cnnvd
CVE	CVE-2022-45138	27 Feb 202314:36	–	cve
Cvelist	CVE-2022-45138 WAGO: Missing Authentication for Critical Function	27 Feb 202314:36	–	cvelist
EUVD	EUVD-2022-48053	3 Oct 202520:07	–	euvd
osv_cve	CVE-2022-45138	27 Feb 202315:15	–	osv_cve
Prion	Design/Logic Flaw	27 Feb 202315:15	–	prion
Prion	Design/Logic Flaw	27 Feb 202315:15	–	prion
Positive Technologies	PT-2023-1472 · Wago · Wago Cc100 +3	27 Feb 202300:00	–	ptsecurity

NVD

Node

AND

OR

wago 751-9301_firmwareRange16–22

wago 751-9301_firmwareMatch22-

wago 751-9301_firmwareMatch23

wago 751-9301Match-

Node

AND

OR

wago 752-8303/8000-002_firmwareRange18–22

wago 752-8303/8000-002_firmwareMatch22-

wago 752-8303/8000-002_firmwareMatch23

wago 752-8303/8000-002Match-

Node

AND

OR

wago pfc100_firmwareRange16–22

wago pfc100_firmwareMatch22-

wago pfc100_firmwareMatch23

wago pfc100Match-

Node

AND

OR

wago pfc200_firmwareRange16–22

wago pfc200_firmwareMatch22-

wago pfc200_firmwareMatch23

wago pfc200Match-

Node

AND

OR

wago touch_panel_600_advanced_firmwareRange16–22

wago touch_panel_600_advanced_firmwareMatch22-

wago touch_panel_600_advanced_firmwareMatch23

wago touch_panel_600_advancedMatch-

Node

AND

OR

wago touch_panel_600_marine_firmwareRange16–22

wago touch_panel_600_marine_firmwareMatch22-

wago touch_panel_600_marine_firmwareMatch23

wago touch_panel_600_marineMatch-

Node

AND

OR

wago touch_panel_600_standard_firmwareRange16–22

wago touch_panel_600_standard_firmwareMatch22-

wago touch_panel_600_standard_firmwareMatch23

wago touch_panel_600_standardMatch-

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2022-060/

17 Jun 2026 05:09Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

EPSS0.0074

SSVC

web-based management unauthenticated access device compromise