Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-48054

Malicious code in bioql PyPI...

5.3CVSS5.8AI score0.00254EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:29 p.m.7 views

CVE-2022-45138

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the devic...

9.8CVSS6.7AI score0.0074EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/03/08 12:0 a.m.40 views

Wago Multiple Products Web-based Management Missing Authentication for Critical Function (CVE-2022-45138)

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the devic...

9.8CVSS7.2AI score0.0074EPSS
Exploits0References2
Circl
Circl
added 2023/03/06 5:0 p.m.2 views

CVE-2022-45138

creationtimestamp| type| source ---|---|--- 2023-03-06 17:00:09+00:00| seen| https://t.me/truesecator/4136 2023-06-16 12:20:19+00:00| seen| https://t.me/icscert/757 2025-03-10 17:38:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7020...

9.8CVSS7.1AI score0.0074EPSS
Exploits0References3
CVE
CVE
added 2023/02/27 2:36 p.m.79 views

CVE-2022-45138

CVE-2022-45138 affects Wago web-based management: the configuration backend can be accessed by unauthenticated users, enabling read/write of device parameters and potentially full device compromise. Root cause per sources is missing authentication/authorization on the web-based API. Impact descri...

9.8CVSS6.5AI score0.0074EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/27 2:36 p.m.7 views

CVE-2022-45138 WAGO: Missing Authentication for Critical Function

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the devic...

9.8CVSS6.7AI score0.0074EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/02/27 2:36 p.m.20 views

CVE-2022-45138 WAGO: Missing Authentication for Critical Function

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the devic...

9.8CVSS6.7AI score0.0074EPSS
Exploits0References1
Rows per page
Query Builder