WAGO PLCs WBM vulnerable to reflected XSS
Priority LOW 25CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.
Summary
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
Why it matters now
EPSS 0.00484 41st percentileScored 2026-11-07
Fix Fixed Compact Controller CC100 (751-9301) (WAGO): FW22Edge Controller (752-8303/8000-002) (WAGO): FW22+2 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| WAGO | Compact Controller CC100 (751-9301) | FW16 to before FW22 | FW22 | Patch available | CNA |
| WAGO | Edge Controller (752-8303/8000-002) | FW16 to before FW22 | FW22 | Patch available | CNA |
| WAGO | Series PFC100 (750-81xx/xxx-xxx) | FW16 to before FW22 | FW22 | Patch available | CNA |
| WAGO | Series PFC200 (750-82xx/xxx-xxx) | FW16 to before FW22 | FW22 | Patch available | CNA |
| WAGO | Series Touch Panel 600 Advanced Line (762-5xxx) | FW16 FW22 | — | No fix listed | CNA |
| WAGO | Series Touch Panel 600 Marine Line (762-6xxx) | FW16 FW22 | — | No fix listed | CNA |
| WAGO | Series Touch Panel 600 Standard Line (762-4xxx) | FW16 FW22 | — | No fix listed | CNA |
- Compact Controller CC100 (751-9301) VendorWAGO Affected FW16 to before FW22 Fixed in FW22 Patch available CNA
- Edge Controller (752-8303/8000-002) VendorWAGO Affected FW16 to before FW22 Fixed in FW22 Patch available CNA
- Series PFC100 (750-81xx/xxx-xxx) VendorWAGO Affected FW16 to before FW22 Fixed in FW22 Patch available CNA
- Series PFC200 (750-82xx/xxx-xxx) VendorWAGO Affected FW16 to before FW22 Fixed in FW22 Patch available CNA
- Series Touch Panel 600 Advanced Line (762-5xxx) VendorWAGO Affected FW16 FW22 Fixed in — No fix listed CNA
- Series Touch Panel 600 Marine Line (762-6xxx) VendorWAGO Affected FW16 FW22 Fixed in — No fix listed CNA
- Series Touch Panel 600 Standard Line (762-4xxx) VendorWAGO Affected FW16 FW22 Fixed in — No fix listed CNA
CPE configurations NVD · 49
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wago:750-8100_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-8100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-8101_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-8101:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-8102_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-8102:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:751-9301_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:751-9301:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-8202_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
- cpe:2.3:o:wago:750-8100_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-8100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-8101_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-8101:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-8102_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-8102:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:751-9301_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:751-9301:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-8202_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Show 39 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:wago:762-4205\/8000-002_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:762-4205\/8000-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:762-4206\/8000-002_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:762-4206\/8000-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:762-4305\/8000-002_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:762-4305\/8000-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:762-4306\/8000-002_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:762-4306\/8000-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:762-5205\/8000-001_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:762-5205\/8000-001:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:762-5206\/8000-001_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:762-5206\/8000-001:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:762-5305\/8000-002_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:762-5305\/8000-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:762-5306\/8000-002_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:762-5306\/8000-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:762-6301\/8000-002_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:762-6301\/8000-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:762-6302\/8000-002_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:762-6302\/8000-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:762-6303\/8000-002_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:762-6303\/8000-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:762-6304\/8000-002_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:762-6304\/8000-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-8102\/025-000_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-8102\/025-000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-8101\/025-000_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:o:wago:750-82_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-82:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-8202\/000-012_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-8202\/000-012:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-8202\/000-022_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-8202\/000-022:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-8202\/025-001_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-8202\/025-001:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:750-8202\/025-000_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:750-8202\/025-000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
| cpe:2.3:o:wago:752-8303\/8000-002_firmware:*:*:*:*:*:*:*:* | fw16 to before fw22 | Vulnerable | WAGO |
| cpe:2.3:h:wago:752-8303\/8000-002:-:*:*:*:*:*:*:* | not specified by NVD | Running on | WAGO |
- cpe:2.3:o:wago:762-4205\/8000-002_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:762-4205\/8000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:762-4206\/8000-002_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:762-4206\/8000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:762-4305\/8000-002_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:762-4305\/8000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:762-4306\/8000-002_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:762-4306\/8000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:762-5205\/8000-001_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:762-5205\/8000-001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:762-5206\/8000-001_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:762-5206\/8000-001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:762-5305\/8000-002_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:762-5305\/8000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:762-5306\/8000-002_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:762-5306\/8000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:762-6301\/8000-002_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:762-6301\/8000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:762-6302\/8000-002_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:762-6302\/8000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:762-6303\/8000-002_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:762-6303\/8000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:762-6304\/8000-002_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:762-6304\/8000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-8102\/025-000_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-8102\/025-000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-8101\/025-000_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:o:wago:750-82_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-82:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-8202\/000-012_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-8202\/000-012:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-8202\/000-022_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-8202\/000-022:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-8202\/025-001_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-8202\/025-001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:750-8202\/025-000_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:750-8202\/025-000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
- cpe:2.3:o:wago:752-8303\/8000-002_firmware:*:*:*:*:*:*:*:* Versions fw16 to before fw22 Vulnerable ·WAGO
- cpe:2.3:h:wago:752-8303\/8000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
Remediation
- Fix · CNA Compact Controller CC100 (751-9301) (WAGO) Fixed in FW22
- Fix · CNA Edge Controller (752-8303/8000-002) (WAGO) Fixed in FW22
- Fix · CNA Series PFC100 (750-81xx/xxx-xxx) (WAGO) Fixed in FW22
- Fix · CNA Series PFC200 (750-82xx/xxx-xxx) (WAGO) Fixed in FW22
Timeline
- 2026-10-02 Threatist record created from CVE-2022-22511
- 2026-10-03 Alias added: GHSA-9vh8-h9vp-88fv
References
More WAGO 750-8100 Firmware vulnerabilities
- TI-2021-13584 WAGO I/O-Check Service prone to Memory Overflow CVSS 3.1CRITICAL 9.1
- TI-2021-13587 WAGO I/O-Check Service prone to Out-of-bounds Write CVSS 3.1CRITICAL 9.8
- TI-2021-13585 WAGO I/O-Check Service prone to Out-of-bounds Read CVSS 3.1HIGH 8.2
- TI-2021-13586 WAGO I/O-Check Service prone to Allocation of Resources Without Limits or Throttling CVSS 3.1HIGH 7.5
- TI-2022-03031 WAGO: multiple products - Loss of MAC-Address-Filtering after reboot CVSS 3.1HIGH 7.5
- TI-2020-09721 CODESYS V3 prone to Inadequate Password Hashing CVSS 3.1HIGH 7.8
Sources
- CVE-2022-22511 · CVE Program
- CVE-2022-22511 · NVD
- FIRST EPSS
- GHSA-9vh8-h9vp-88fv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences