1. Home
  2. CVE Database
  3. CVE-2022-22511
MEDIUM · 5.4

CVE-2022-22511

Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential inform...

Vulnerability Description

Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.

CVSS Score

5.4

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
Wago750-8100 Firmware>= fw16, < fw22
Wago750-8100-
Wago750-8101 Firmware>= fw16, < fw22
Wago750-8101-
Wago750-8102 Firmware>= fw16, < fw22
Wago750-8102-
Wago751-9301 Firmware>= fw16, < fw22
Wago751-9301-
Wago750-8202 Firmware>= fw16, < fw22
Wago750-8202-
Wago762-4205\/8000-002 Firmware>= fw16, < fw22
Wago762-4205\/8000-002-
Wago762-4206\/8000-002 Firmware>= fw16, < fw22
Wago762-4206\/8000-002-
Wago762-4305\/8000-002 Firmware>= fw16, < fw22
Wago762-4305\/8000-002-
Wago762-4306\/8000-002 Firmware>= fw16, < fw22
Wago762-4306\/8000-002-
Wago762-5205\/8000-001 Firmware>= fw16, < fw22
Wago762-5205\/8000-001-

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2022-22511?

CVE-2022-22511 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential inform...

How severe is CVE-2022-22511?

CVE-2022-22511 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-22511?

Check the references section above for vendor advisories and patch information. Affected products include: Wago 750-8100 Firmware, Wago 750-8100, Wago 750-8101 Firmware, Wago 750-8101, Wago 750-8102 Firmware.