CVE-2022-50926: Reliance on Cookies without Validation and Integrity Checking

WAGO 750-8212 PFC200 G2 2ETH RS firmware contains a privilege escalation vulnerability that allows attackers to manipulate user session cookies. Attackers can modify the cookie's 'name' and 'roles' parameters to elevate from ordinary user to administrative privileges without authentication...

WAGO Cross-Site Request Forgery Vulnerability

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is designed specifically for applications in industrial environments where digital algorithms operate electronic systems. A security vulnerability exists in the WAGO 750-8212 PFC200 G2 2ETH RS that originates fr...

WAGO 750-8212 PFC200 G2 2ETH RS - Privilege Escalation

Exploit Title: WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation Date: 02/16/2022 Exploit Author: Momen Eldawakhly Cyber Guy at Cypro AB Vendor Homepage: https://www.wago.com Version: Firmware version 03.05.1017 Tested on: PopOS! Linux ======================================== = The ordinary us...

PT-2022-12685

Name of the Vulnerable Software and Affected Versions WAGO 750-8212 PFC200 G2 2ETH RS Firmware version 03.05.1017 Description The issue is related to improper handling of user cookies, which can lead to escalating privileges to the administrative account of the router. This is a privilege...