Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Compact Controller CC100 (751-9301)
Vendor
WAGO
Product
Compact Controller CC100 (751-9301)
Platforms
Unknown
Default status
Unknown
Compact Controller CC100 (751-9301) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
Edge Controller (752-8303/8000-002)
Vendor
WAGO
Product
Edge Controller (752-8303/8000-002)
Platforms
Unknown
Default status
Unknown
Edge Controller (752-8303/8000-002) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
Series PFC100 (750-81xx/xxx-xxx)
Vendor
WAGO
Product
Series PFC100 (750-81xx/xxx-xxx)
Platforms
Unknown
Default status
Unknown
Series PFC100 (750-81xx/xxx-xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
Series PFC200 (750-82xx/xxx-xxx)
Vendor
WAGO
Product
Series PFC200 (750-82xx/xxx-xxx)
Platforms
Unknown
Default status
Unknown
Series PFC200 (750-82xx/xxx-xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
Series Touch Panel 600 Advanced Line (762-5xxx)
Vendor
WAGO
Product
Series Touch Panel 600 Advanced Line (762-5xxx)
Platforms
Unknown
Default status
Unknown
Series Touch Panel 600 Advanced Line (762-5xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16 FW22
affected
Unavailable
Unavailable
Unavailable
None listed
Series Touch Panel 600 Marine Line (762-6xxx)
Vendor
WAGO
Product
Series Touch Panel 600 Marine Line (762-6xxx)
Platforms
Unknown
Default status
Unknown
Series Touch Panel 600 Marine Line (762-6xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16 FW22
affected
Unavailable
Unavailable
Unavailable
None listed
Series Touch Panel 600 Standard Line (762-4xxx)
Vendor
WAGO
Product
Series Touch Panel 600 Standard Line (762-4xxx)
Platforms
Unknown
Default status
Unknown
Series Touch Panel 600 Standard Line (762-4xxx) · Scoped product and version facts