47
CVE-2022-45139
—CVSS 3.1
5.3 medium
EPSS
<1%p17
Published
()
Modified
Description
A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of confidentiality.
- Vendors
- wago
- Products
- 751-9301 firmware, 752-8303\/8000-002 firmware, pfc100 firmware, pfc200 firmware, touch panel 600 advanced firmware, touch panel 600 marine firmware, touch panel 600 standard firmware
- Weakness
- CWE-346
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N