VulnerabilityModified
CVE-2022-3281
This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.
HIGH 7.5EPSS 0.70%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.70%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- EPSS
- 0.70% probability · 51th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-440
- Affected
- wago/750-8100 firmware · wago/750-8101 firmware · wago/750-8101\/000-010 firmware · wago/750-8101\/025-000 firmware · wago/750-8102 firmware · wago/750-8102\/025-000 firmware · wago/750-8202\/000-011 firmware · wago/750-8202\/000-012 firmware · wago/750-8202\/000-022 firmware · wago/750-8206 firmware · wago/750-8206\/025-000 firmware · wago/750-8206\/025-001 firmware · wago/750-8207 firmware · wago/750-8207\/025-000 firmware · wago/750-8207\/025-001 firmware · wago/750-8208 firmware · wago/750-8208\/025-000 firmware · wago/750-8208\/025-001 firmware · wago/750-8210 firmware · wago/750-8210\/025-000 firmware · +40 more
- Source
- info@cert.vde.com
References
- https://cert.vde.com/en/advisories/VDE-2022-042/Mitigation, Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2022-042/Mitigation, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.