WAGO: Origin validation error through CORS misconfiguration
A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of confidentiality.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Compact Controller CC100 (751-9301)
Vendor
WAGO
Product
Compact Controller CC100 (751-9301)
Platforms
Unknown
Default status
unaffected
Compact Controller CC100 (751-9301) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
FW22 Patch 1
unaffected
Unavailable
Unavailable
Unavailable
None listed
FW23
affected
Unavailable
Unavailable
Unavailable
None listed
Edge Controller (752-8303/8000-002)
Vendor
WAGO
Product
Edge Controller (752-8303/8000-002)
Platforms
Unknown
Default status
unaffected
Edge Controller (752-8303/8000-002) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW18
affected
custom
FW22
Unavailable
None listed
FW22 Patch 1
unaffected
Unavailable
Unavailable
Unavailable
None listed
FW23
affected
Unavailable
Unavailable
Unavailable
None listed
PFC100 (750-81xx/xxx-xxx)
Vendor
WAGO
Product
PFC100 (750-81xx/xxx-xxx)
Platforms
Unknown
Default status
unaffected
PFC100 (750-81xx/xxx-xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
FW22 Patch 1
unaffected
Unavailable
Unavailable
Unavailable
None listed
FW23
affected
Unavailable
Unavailable
Unavailable
None listed
PFC200 (750-82xx/xxx-xxx)
Vendor
WAGO
Product
PFC200 (750-82xx/xxx-xxx)
Platforms
Unknown
Default status
unaffected
PFC200 (750-82xx/xxx-xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
FW22 Patch 1
unaffected
Unavailable
Unavailable
Unavailable
None listed
FW23
affected
Unavailable
Unavailable
Unavailable
None listed
Touch Panel 600 Advanced Line (762-5xxx)
Vendor
WAGO
Product
Touch Panel 600 Advanced Line (762-5xxx)
Platforms
Unknown
Default status
unaffected
Touch Panel 600 Advanced Line (762-5xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
FW22 Patch 1
unaffected
Unavailable
Unavailable
Unavailable
None listed
FW23
affected
Unavailable
Unavailable
Unavailable
None listed
Touch Panel 600 Marine Line (762-6xxx)
Vendor
WAGO
Product
Touch Panel 600 Marine Line (762-6xxx)
Platforms
Unknown
Default status
unaffected
Touch Panel 600 Marine Line (762-6xxx) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
FW16
affected
custom
FW22
Unavailable
None listed
FW22 Patch 1
unaffected
Unavailable
Unavailable
Unavailable
None listed
FW23
affected
Unavailable
Unavailable
Unavailable
None listed
Touch Panel 600 Standard Line (762-4xxx)
Vendor
WAGO
Product
Touch Panel 600 Standard Line (762-4xxx)
Platforms
Unknown
Default status
unaffected
Touch Panel 600 Standard Line (762-4xxx) · Scoped product and version facts