Skip to content

Known vulnerabilities in WAGO PFC100 (750-81xx/xxx-xxx)

Is your version affected?

CVE Summary Score Published
CVE-2022-45140 The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage,… 9.8 Critical Feb 27, 2023
CVE-2022-45139 A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic… 5.3 Medium Feb 27, 2023
CVE-2022-45138 The configuration backend of the web-based management can be used by unauthenticated users, although only… 9.8 Critical Feb 27, 2023
CVE-2022-45137 The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that… 6.1 Medium Feb 27, 2023

Other WAGO products