Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-27	CVE-2022-45140	Missing Authentication for Critical Function vulnerability in Wago products The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and full system compromise. network low complexity wago CWE-306 critical	9.8
2023-02-27	CVE-2022-45138	Missing Authentication for Critical Function vulnerability in Wago products The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. network low complexity wago CWE-306 critical	9.8