Vulnerability Description
The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Wago | Pfc100 Firmware | >= 16, <= 22 |
| Wago | Pfc100 | - |
| Wago | Pfc200 Firmware | >= 16, <= 22 |
| Wago | Pfc200 | - |
| Wago | Touch Panel 600 Advanced Firmware | >= 16, <= 22 |
| Wago | Touch Panel 600 Advanced | - |
| Wago | Touch Panel 600 Standard Firmware | >= 16, <= 22 |
| Wago | Touch Panel 600 Standard | - |
| Wago | Touch Panel 600 Marine Firmware | >= 16, <= 22 |
| Wago | Touch Panel 600 Marine | - |
| Wago | Cc100 Firmware | >= 16, <= 22 |
| Wago | Cc100 | - |
| Wago | Edge Controller Firmware | >= 16, <= 22 |
| Wago | Edge Controller | - |
Related Weaknesses (CWE)
References
- https://cert.vde.com/en/advisories/VDE-2022-054/Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2022-054/Third Party Advisory
FAQ
What is CVE-2022-3738?
CVE-2022-3738 is a vulnerability with a CVSS score of 5.9 (MEDIUM). The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A...
How severe is CVE-2022-3738?
CVE-2022-3738 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-3738?
Check the references section above for vendor advisories and patch information. Affected products include: Wago Pfc100 Firmware, Wago Pfc100, Wago Pfc200 Firmware, Wago Pfc200, Wago Touch Panel 600 Advanced Firmware.