cbcvebase.
CVE-2022-45139
published 2023-02-27

CVE-2022-45139: A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In…

PriorityP425medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.25%
16.8th percentile
A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of confidentiality.

Affected

21 ranges
VendorProductVersion rangeFixed in
wago751-9301_firmware——
wago751-9301_firmware——
wago751-9301_firmware>= 16 < 2222
wago752-8303_8000-002_firmware——
wago752-8303_8000-002_firmware——
wago752-8303_8000-002_firmware>= 18 < 2222
wagopfc100_firmware——
wagopfc100_firmware——
wagopfc100_firmware>= 16 < 2222
wagopfc200_firmware——
wagopfc200_firmware——
wagopfc200_firmware>= 16 < 2222
wagotouch_panel_600_advanced_firmware——
wagotouch_panel_600_advanced_firmware——
wagotouch_panel_600_advanced_firmware>= 16 < 2222
wagotouch_panel_600_marine_firmware——
wagotouch_panel_600_marine_firmware——
wagotouch_panel_600_marine_firmware>= 16 < 2222
wagotouch_panel_600_standard_firmware——
wagotouch_panel_600_standard_firmware——
wagotouch_panel_600_standard_firmware>= 16 < 2222
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.