Read the docs
TI-2022-22215 Aliases CVE-2022-45140GHSA-4p8v-g44f-p8hp

WAGO: Missing Authentication for Critical Function

Priority MEDIUM 45CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-306.

Summary

The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01067 64th percentileScored 2026-11-07
Fix Fixed Compact Controller CC100 (751-9301) (WAGO): FW22, FW22 Patch 1Edge Controller (752-8303/8000-002) (WAGO): FW22, FW22 Patch 1+5 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
WAGOCompact Controller CC100 (751-9301)FW16 to before FW22; FW23FW22, FW22 Patch 1Patch availableCNA
WAGOEdge Controller (752-8303/8000-002)FW16 to before FW22; FW23FW22, FW22 Patch 1Patch availableCNA
WAGOPFC100 (750-81xx/xxx-xxx)FW16 to before FW22; FW23FW22, FW22 Patch 1Patch availableCNA
WAGOPFC200 (750-82xx/xxx-xxx)FW16 to before FW22; FW23FW22, FW22 Patch 1Patch availableCNA
WAGOTouch Panel 600 Advanced Line (762-5xxx)FW16 to before FW22; FW23FW22, FW22 Patch 1Patch availableCNA
WAGOTouch Panel 600 Marine Line (762-6xxx)FW16 to before FW22; FW23FW22, FW22 Patch 1Patch availableCNA
WAGOTouch Panel 600 Standard Line (762-4xxx)FW16 to before FW22; FW23FW22, FW22 Patch 1Patch availableCNA
  • Compact Controller CC100 (751-9301) VendorWAGO Affected FW16 to before FW22; FW23 Fixed in FW22, FW22 Patch 1 Patch available CNA
  • Edge Controller (752-8303/8000-002) VendorWAGO Affected FW16 to before FW22; FW23 Fixed in FW22, FW22 Patch 1 Patch available CNA
  • PFC100 (750-81xx/xxx-xxx) VendorWAGO Affected FW16 to before FW22; FW23 Fixed in FW22, FW22 Patch 1 Patch available CNA
  • PFC200 (750-82xx/xxx-xxx) VendorWAGO Affected FW16 to before FW22; FW23 Fixed in FW22, FW22 Patch 1 Patch available CNA
  • Touch Panel 600 Advanced Line (762-5xxx) VendorWAGO Affected FW16 to before FW22; FW23 Fixed in FW22, FW22 Patch 1 Patch available CNA
  • Touch Panel 600 Marine Line (762-6xxx) VendorWAGO Affected FW16 to before FW22; FW23 Fixed in FW22, FW22 Patch 1 Patch available CNA
  • Touch Panel 600 Standard Line (762-4xxx) VendorWAGO Affected FW16 to before FW22; FW23 Fixed in FW22, FW22 Patch 1 Patch available CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:o:wago:751-9301_firmware:*:*:*:*:*:*:*:*16 to before 22VulnerableWAGO
cpe:2.3:o:wago:751-9301_firmware:22:-:*:*:*:*:*:*22VulnerableWAGO
cpe:2.3:o:wago:751-9301_firmware:23:*:*:*:*:*:*:*23VulnerableWAGO
cpe:2.3:h:wago:751-9301:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:752-8303\/8000-002_firmware:*:*:*:*:*:*:*:*18 to before 22VulnerableWAGO
cpe:2.3:o:wago:752-8303\/8000-002_firmware:22:-:*:*:*:*:*:*22VulnerableWAGO
cpe:2.3:o:wago:752-8303\/8000-002_firmware:23:*:*:*:*:*:*:*23VulnerableWAGO
cpe:2.3:h:wago:752-8303\/8000-002:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:pfc100_firmware:*:*:*:*:*:*:*:*16 to before 22VulnerableWAGO
cpe:2.3:o:wago:pfc100_firmware:22:-:*:*:*:*:*:*22VulnerableWAGO
  • cpe:2.3:o:wago:751-9301_firmware:*:*:*:*:*:*:*:* Versions 16 to before 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:751-9301_firmware:22:-:*:*:*:*:*:* Versions 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:751-9301_firmware:23:*:*:*:*:*:*:* Versions 23 Vulnerable ·WAGO
  • cpe:2.3:h:wago:751-9301:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:752-8303\/8000-002_firmware:*:*:*:*:*:*:*:* Versions 18 to before 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:752-8303\/8000-002_firmware:22:-:*:*:*:*:*:* Versions 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:752-8303\/8000-002_firmware:23:*:*:*:*:*:*:* Versions 23 Vulnerable ·WAGO
  • cpe:2.3:h:wago:752-8303\/8000-002:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:pfc100_firmware:*:*:*:*:*:*:*:* Versions 16 to before 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:pfc100_firmware:22:-:*:*:*:*:*:* Versions 22 Vulnerable ·WAGO
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:wago:pfc100_firmware:23:*:*:*:*:*:*:*23VulnerableWAGO
cpe:2.3:h:wago:pfc100:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:pfc200_firmware:*:*:*:*:*:*:*:*16 to before 22VulnerableWAGO
cpe:2.3:o:wago:pfc200_firmware:22:-:*:*:*:*:*:*22VulnerableWAGO
cpe:2.3:o:wago:pfc200_firmware:23:*:*:*:*:*:*:*23VulnerableWAGO
cpe:2.3:h:wago:pfc200:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:touch_panel_600_advanced_firmware:*:*:*:*:*:*:*:*16 to before 22VulnerableWAGO
cpe:2.3:o:wago:touch_panel_600_advanced_firmware:22:-:*:*:*:*:*:*22VulnerableWAGO
cpe:2.3:o:wago:touch_panel_600_advanced_firmware:23:*:*:*:*:*:*:*23VulnerableWAGO
cpe:2.3:h:wago:touch_panel_600_advanced:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:touch_panel_600_marine_firmware:*:*:*:*:*:*:*:*16 to before 22VulnerableWAGO
cpe:2.3:o:wago:touch_panel_600_marine_firmware:22:-:*:*:*:*:*:*22VulnerableWAGO
cpe:2.3:o:wago:touch_panel_600_marine_firmware:23:*:*:*:*:*:*:*23VulnerableWAGO
cpe:2.3:h:wago:touch_panel_600_marine:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
cpe:2.3:o:wago:touch_panel_600_standard_firmware:*:*:*:*:*:*:*:*16 to before 22VulnerableWAGO
cpe:2.3:o:wago:touch_panel_600_standard_firmware:22:-:*:*:*:*:*:*22VulnerableWAGO
cpe:2.3:o:wago:touch_panel_600_standard_firmware:23:*:*:*:*:*:*:*23VulnerableWAGO
cpe:2.3:h:wago:touch_panel_600_standard:-:*:*:*:*:*:*:*not specified by NVDRunning onWAGO
  • cpe:2.3:o:wago:pfc100_firmware:23:*:*:*:*:*:*:* Versions 23 Vulnerable ·WAGO
  • cpe:2.3:h:wago:pfc100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:pfc200_firmware:*:*:*:*:*:*:*:* Versions 16 to before 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:pfc200_firmware:22:-:*:*:*:*:*:* Versions 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:pfc200_firmware:23:*:*:*:*:*:*:* Versions 23 Vulnerable ·WAGO
  • cpe:2.3:h:wago:pfc200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:touch_panel_600_advanced_firmware:*:*:*:*:*:*:*:* Versions 16 to before 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:touch_panel_600_advanced_firmware:22:-:*:*:*:*:*:* Versions 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:touch_panel_600_advanced_firmware:23:*:*:*:*:*:*:* Versions 23 Vulnerable ·WAGO
  • cpe:2.3:h:wago:touch_panel_600_advanced:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:touch_panel_600_marine_firmware:*:*:*:*:*:*:*:* Versions 16 to before 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:touch_panel_600_marine_firmware:22:-:*:*:*:*:*:* Versions 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:touch_panel_600_marine_firmware:23:*:*:*:*:*:*:* Versions 23 Vulnerable ·WAGO
  • cpe:2.3:h:wago:touch_panel_600_marine:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO
  • cpe:2.3:o:wago:touch_panel_600_standard_firmware:*:*:*:*:*:*:*:* Versions 16 to before 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:touch_panel_600_standard_firmware:22:-:*:*:*:*:*:* Versions 22 Vulnerable ·WAGO
  • cpe:2.3:o:wago:touch_panel_600_standard_firmware:23:*:*:*:*:*:*:* Versions 23 Vulnerable ·WAGO
  • cpe:2.3:h:wago:touch_panel_600_standard:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·WAGO

Remediation

  • Fix · CNA Compact Controller CC100 (751-9301) (WAGO) Fixed in FW22, FW22 Patch 1
  • Fix · CNA Edge Controller (752-8303/8000-002) (WAGO) Fixed in FW22, FW22 Patch 1
  • Fix · CNA PFC100 (750-81xx/xxx-xxx) (WAGO) Fixed in FW22, FW22 Patch 1
  • Fix · CNA PFC200 (750-82xx/xxx-xxx) (WAGO) Fixed in FW22, FW22 Patch 1
  • Fix · CNA Touch Panel 600 Advanced Line (762-5xxx) (WAGO) Fixed in FW22, FW22 Patch 1
  • Fix · CNA Touch Panel 600 Marine Line (762-6xxx) (WAGO) Fixed in FW22, FW22 Patch 1
  • Fix · CNA Touch Panel 600 Standard Line (762-4xxx) (WAGO) Fixed in FW22, FW22 Patch 1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    WAGO Compact Controller CC100 (751-9301), Edge Controller (752-8303/8000-002) and 5 more products FW22

    4 records Highest priority Priority MEDIUM 2 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2022-22213 WAGO: Missing Authentication for Critical FunctionPriority MEDIUM 43
    • TI-2022-22212 WAGO: Reflective Cross-Site ScriptingPriority LOW 27
    • TI-2022-22214 WAGO: Origin validation error through CORS misconfigurationPriority LOW 24
    Show all 4 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-45140
  2. 2026-10-03 Alias added: GHSA-4p8v-g44f-p8hp

References

Advisory 1

  • TI-2022-22213 WAGO: Missing Authentication for Critical Function CVSS 3.1CRITICAL 9.8
  • TI-2022-03031 WAGO: multiple products - Loss of MAC-Address-Filtering after reboot CVSS 3.1HIGH 7.5
  • TI-2022-22212 WAGO: Reflective Cross-Site Scripting CVSS 3.1MEDIUM 6.1
  • TI-2022-06787 WAGO PLCs WBM vulnerable to reflected XSS CVSS 3.1MEDIUM 5.4
  • TI-2022-22214 WAGO: Origin validation error through CORS misconfiguration CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences