Vulnerability Description
WAGO 750-8212 PFC200 G2 2ETH RS firmware contains a privilege escalation vulnerability that allows attackers to manipulate user session cookies. Attackers can modify the cookie's 'name' and 'roles' parameters to elevate from ordinary user to administrative privileges without authentication.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/50793
- https://www.vulncheck.com/advisories/wago-pfc-g-eth-rs-privilege-escalation
- https://www.wago.com
FAQ
What is CVE-2022-50926?
CVE-2022-50926 is a vulnerability with a CVSS score of 9.8 (CRITICAL). WAGO 750-8212 PFC200 G2 2ETH RS firmware contains a privilege escalation vulnerability that allows attackers to manipulate user session cookies. Attackers can modify the cookie's 'name' and 'roles' pa...
How severe is CVE-2022-50926?
CVE-2022-50926 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2022-50926?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.