CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-45140
Critical (9.8) in wago. EPSS 1.1% chance of exploitation in the next 30 days.
The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWE
- CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- wago:751-9301_firmware
- wago:752-8303\/8000-002_firmware
- wago:pfc100_firmware
- wago:pfc200_firmware
- wago:touch_panel_600_advanced_firmware
- wago:touch_panel_600_marine_firmware
- wago:touch_panel_600_standard_firmware