CVSS 3.1
5.4 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NCVE-2022-22511
Medium (5.4) in wago. EPSS 0.5% chance of exploitation in the next 30 days.
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- wago:750-8100_firmware
- wago:750-8101\/025-000_firmware
- wago:750-8101_firmware
- wago:750-8102\/025-000_firmware
- wago:750-8102_firmware
- wago:750-8202\/000-012_firmware
- wago:750-8202\/000-022_firmware
- wago:750-8202\/025-000_firmware
- wago:750-8202\/025-001_firmware
- wago:750-8202_firmware
- wago:750-82_firmware
- wago:751-9301_firmware
- wago:752-8303\/8000-002_firmware
- wago:762-4205\/8000-002_firmware
- wago:762-4206\/8000-002_firmware
- wago:762-4305\/8000-002_firmware
- wago:762-4306\/8000-002_firmware
- wago:762-5205\/8000-001_firmware
- wago:762-5206\/8000-001_firmware
- wago:762-5305\/8000-002_firmware
- wago:762-5306\/8000-002_firmware
- wago:762-6301\/8000-002_firmware
- wago:762-6302\/8000-002_firmware
- wago:762-6303\/8000-002_firmware
- wago:762-6304\/8000-002_firmware