Product:

Pfc100_firmware

(Wago)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 13
Date Id Summary Products Score Patch Annotated
2023-01-19 CVE-2022-3738 The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull. Cc100_firmware, Edge_controller_firmware, Pfc100_firmware, Pfc200_firmware, Touch_panel_600_advanced_firmware, Touch_panel_600_marine_firmware, Touch_panel_600_standard_firmware 5.9
2023-02-27 CVE-2022-45137 The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability. 751\-9301_firmware, 752\-8303\/8000\-002_firmware, Pfc100_firmware, Pfc200_firmware, Touch_panel_600_advanced_firmware, Touch_panel_600_marine_firmware, Touch_panel_600_standard_firmware N/A
2023-02-27 CVE-2022-45138 The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the device. 751\-9301_firmware, 752\-8303\/8000\-002_firmware, Pfc100_firmware, Pfc200_firmware, Touch_panel_600_advanced_firmware, Touch_panel_600_marine_firmware, Touch_panel_600_standard_firmware N/A