CVE-2022-3281

CVSS V2 None CVSS V3 High 7.5
Description
WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.
Overview
  • CVE ID
  • CVE-2022-3281
  • Assigner
  • info@cert.vde.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-10-17T09:15:12
  • Last Modified Date
  • 2022-11-04T19:14:00
Weakness Enumerations
CWE URL
CWE-440 http://cwe.mitre.org/data/definitions/440.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:wago:750-8100_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8100:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8101_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8101:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8101\/000-010_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8101\/000-010:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8101\/025-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8101\/025-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8102_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8102:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8102\/025-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8102\/025-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8202\/000-011_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8202\/000-011:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8202\/000-012_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8202\/000-012:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8202\/000-022_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8202\/000-022:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8206_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8206:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8206\/025-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8206\/025-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8206\/025-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8206\/025-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8207_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8207:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8207\/025-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8207\/025-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8207\/025-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8207\/025-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8208_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8208:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8208\/025-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8208\/025-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8208\/025-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8208\/025-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8210_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8210:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8210\/025-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8210\/025-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8211_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8211:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8212_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8212:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8212\/000-100_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8212\/000-100:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8212\/025-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8212\/025-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8212\/025-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8212\/025-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8212\/025-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8212\/025-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8213_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8213:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8214_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8214:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8215_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8215:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8216_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8216:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8216\/025-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8216\/025-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8216\/025-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8216\/025-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8202\/040-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8202\/040-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8206\/040-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8206\/040-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8206\/040-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8206\/040-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8210\/040-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8210\/040-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8211\/040-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8211\/040-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8212\/040-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8212\/040-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8212\/040-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8212\/040-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8212\/040-010_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8212\/040-010:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8213\/040-010_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8213\/040-010:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8216\/040-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8216\/040-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8217_firmware:*:*:*:*:*:*:*:* 1 OR 03.04.10\(16\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8217:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8217\/025-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.04.10\(16\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8217\/025-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8217\/600-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.04.10\(16\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8217\/600-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:750-8217\/625-000_firmware:*:*:*:*:*:*:*:* 1 OR 03.04.10\(16\) 03.10.08\(22\)
cpe:2.3:h:wago:750-8217\/625-000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4201\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4201\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4202\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4202\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4203\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4203\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4204\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4204\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4205\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4205\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4206\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4206\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4301\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4301\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4302\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4302\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4303\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4303\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4304\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4304\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4101_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4101:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4102_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4102:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4103_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4103:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-4104_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-4104:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-5203\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-5203\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-5204\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-5204\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-5205\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-5205\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-5206\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-5206\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-5303\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-5303\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-5304\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-5304\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-5305\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-5305\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-5306\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-5306\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-6201\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-6201\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-6202\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-6202\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-6203\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-6203\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-6204\/8000-001_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-6204\/8000-001:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-6301\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-6301\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-6302\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-6302\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-6303\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-6303\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:762-6304\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.01.07\(13\) 03.10.09\(22\)
cpe:2.3:h:wago:762-6304\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:752-8303\/8000-002_firmware:*:*:*:*:*:*:*:* 1 OR 03.06.09\(18\) 03.10.09\(22\)
cpe:2.3:h:wago:752-8303\/8000-002:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:wago:751-9301_firmware:*:*:*:*:*:*:*:* 1 OR 03.07.17\(19\) 03.09.08\(21\)
cpe:2.3:h:wago:751-9301:-:*:*:*:*:*:*:* 0 OR
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • LOW
  • Privileges Required
  • NONE
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • NONE
  • Availability Impact
  • NONE
  • Base Score
  • 7.5
  • Base Severity
  • HIGH
  • Exploitability Score
  • 3.9
  • Impact Score
  • 3.6
References
Reference URL Reference Tags
https://cert.vde.com/en/advisories/VDE-2022-042/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-3281
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3281
History
Created Old Value New Value Data Type Notes
2022-10-17 10:00:10 Added to TrackCVE
2022-12-07 08:00:43 2022-10-17T09:15Z 2022-10-17T09:15:12 CVE Published Date updated
2022-12-07 08:00:43 2022-11-04T19:14:00 CVE Modified Date updated
2022-12-07 08:00:43 Analyzed Vulnerability Status updated