cbcvebase.
CVE-2022-3281
published 2022-10-17

CVE-2022-3281: WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of…

PriorityP343high7.5CVSS 3.1
AVNACLPRNUINSUCNIHAN
EPSS
0.66%
47.7th percentile
WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.

Affected

86 ranges· showing 25
VendorProductVersion rangeFixed in
wago750-8100_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8101_000-010_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8101_025-000_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8101_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8102_025-000_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8102_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-81xx_xxx-xxx_series_pfc100_pfc20003.01.07(13) – 03.10.08(22)—
wago750-8202_000-011_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8202_000-012_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8202_000-022_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8202_040-000_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8206_025-000_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8206_025-001_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8206_040-000_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8206_040-001_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8206_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8207_025-000_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8207_025-001_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8207_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8208_025-000_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8208_025-001_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8208_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8210_025-000_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8210_040-000_firmware03.01.07\(13\) – 03.10.08\(22\)—
wago750-8210_firmware03.01.07\(13\) – 03.10.08\(22\)—
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.