CVE-2022-45140

🗓️ 27 Feb 2023 15:15:11Reported by [email protected]Type

nvd🔗 web.nvd.nist.gov👁 39 Views

The configuration backend allows unauthenticated data write with root privileges

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	WAGO PLC Server-Side Root Privilege Recording	28 Mar 202300:00	–	bdu_fstec
Circl	CVE-2022-45140	6 Mar 202317:00	–	circl
CNNVD	多款WAGO产品访问控制错误漏洞	27 Feb 202300:00	–	cnnvd
CVE	CVE-2022-45140	27 Feb 202314:36	–	cve
Cvelist	CVE-2022-45140 WAGO: Missing Authentication for Critical Function	27 Feb 202314:36	–	cvelist
EUVD	EUVD-2022-48055	3 Oct 202520:07	–	euvd
osv_cve	CVE-2022-45140	27 Feb 202315:15	–	osv_cve
Prion	Remote code execution	27 Feb 202315:15	–	prion
Positive Technologies	PT-2023-2007 · Wago · Wago Cc100 +3	13 Feb 202300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-45140: Missing Authentication for Critical Function	27 Feb 202300:00	–	rapid7

NVD

Node

AND

OR

wago 751-9301_firmwareRange16–22

wago 751-9301_firmwareMatch22-

wago 751-9301_firmwareMatch23

wago 751-9301Match-

Node

AND

OR

wago 752-8303/8000-002_firmwareRange18–22

wago 752-8303/8000-002_firmwareMatch22-

wago 752-8303/8000-002_firmwareMatch23

wago 752-8303/8000-002Match-

Node

AND

OR

wago pfc100_firmwareRange16–22

wago pfc100_firmwareMatch22-

wago pfc100_firmwareMatch23

wago pfc100Match-

Node

AND

OR

wago pfc200_firmwareRange16–22

wago pfc200_firmwareMatch22-

wago pfc200_firmwareMatch23

wago pfc200Match-

Node

AND

OR

wago touch_panel_600_advanced_firmwareRange16–22

wago touch_panel_600_advanced_firmwareMatch22-

wago touch_panel_600_advanced_firmwareMatch23

wago touch_panel_600_advancedMatch-

Node

AND

OR

wago touch_panel_600_marine_firmwareRange16–22

wago touch_panel_600_marine_firmwareMatch22-

wago touch_panel_600_marine_firmwareMatch23

wago touch_panel_600_marineMatch-

Node

AND

OR

wago touch_panel_600_standard_firmwareRange16–22

wago touch_panel_600_standard_firmwareMatch22-

wago touch_panel_600_standard_firmwareMatch23

wago touch_panel_600_standardMatch-

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2022-060/

17 Jun 2026 05:09Current

10Critical risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.01067

SSVC

configuration backend unauthenticated user remote code execution system compromise