PF
Product
Pfc100 Firmware
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 3Medium 5Low 1
Watch
Add Pfc100 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-45137 | 6.1 | Feb 27 | The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser Affected: 16 before 22; 22; 23 |
| CVE-2022-3738 | 5.9 | Jan 19 | The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists Affected: 16 through 22 |
| CVE-2023-3379 | 5.3 | Nov 20 | Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to… Affected: before 22; 22; 22 |
| CVE-2022-45139 | 5.3 | Feb 27 | A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver Affected: 16 before 22; 22; 23 |
| CVE-2019-5135 | 5.3 | Mar 11 | An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers Affected: 03.00.39(12) |
Showing 5