752-8303/8000-002 Firmware vulnerabilities

2 known vulnerabilities in 752-8303/8000-002 Firmware from WAGO. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Compact Controller CC100 (751-9301): Missing Authentication for Critical Functionality

  CVE-2022-45140Feb 27, 2023WAGOEPSS 1.07%

  The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise.

• 9.8 Critical severity

  Compact Controller CC100 (751-9301): Missing Authentication for Critical Functionality

  CVE-2022-45138Feb 27, 2023WAGO

  The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can