CVSS 3.1
5.9 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2022-3738
Medium (5.9) in wago. EPSS 0.6% chance of exploitation in the next 30 days.
The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
- CWE
- CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- wago:cc100_firmware
- wago:edge_controller_firmware
- wago:pfc100_firmware
- wago:pfc200_firmware
- wago:touch_panel_600_advanced_firmware
- wago:touch_panel_600_marine_firmware
- wago:touch_panel_600_standard_firmware