Advisories · Technology

WAGO Compact Controller CC100 (751-9301).

Every CVE that names WAGO Compact Controller CC100 (751-9301) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-45140 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WAGO: Missing Authentication for Critical Function
- WAGO Compact Controller CC100 (751-9301)
- WAGO Edge Controller (752-8303/8000-002)
- Authentication bypass
Not analysed yet 27 Feb 2023
CVE-2022-45139 CVE record

CVSS 5.3 Medium

WAGO: Origin validation error through CORS misconfiguration
- WAGO Compact Controller CC100 (751-9301)
- WAGO Edge Controller (752-8303/8000-002)
- CWE-346
Not analysed yet 27 Feb 2023
CVE-2022-45138 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WAGO: Missing Authentication for Critical Function
- WAGO Compact Controller CC100 (751-9301)
- WAGO Edge Controller (752-8303/8000-002)
- Authentication bypass
Not analysed yet 27 Feb 2023
CVE-2022-45137 CVE record

CVSS 6.1 Medium

WAGO: Reflective Cross-Site Scripting
- WAGO Compact Controller CC100 (751-9301)
- WAGO Edge Controller (752-8303/8000-002)
- Cross-site scripting (XSS)
Not analysed yet 27 Feb 2023
CVE-2022-22511 CVE record

CVSS 5.4 Medium

WAGO PLCs WBM vulnerable to reflected XSS
- WAGO Compact Controller CC100 (751-9301)
- WAGO Edge Controller (752-8303/8000-002)
- Cross-site scripting (XSS)
Not analysed yet 9 Mar 2022