Vulnerabilities > CVE-2022-3281 - Expected Behavior Violation vulnerability in Wago products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
wago
CWE-440

Summary

WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.

Vulnerable Configurations

Part Description Count
OS
Wago
166
Hardware
Wago
78

Common Weakness Enumeration (CWE)