The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
wago 751-9301_firmware |
||
wago 751-9301_firmware 22 |
||
wago 751-9301_firmware 23 |
||
wago 752-8303\\/8000-002_firmware |
||
wago 752-8303\\/8000-002_firmware 22 |
||
wago 752-8303\\/8000-002_firmware 23 |
||
wago pfc100_firmware |
||
wago pfc100_firmware 22 |
||
wago pfc100_firmware 23 |
||
wago pfc200_firmware |
||
wago pfc200_firmware 22 |
||
wago pfc200_firmware 23 |
||
wago touch_panel_600_advanced_firmware |
||
wago touch_panel_600_advanced_firmware 22 |
||
wago touch_panel_600_advanced_firmware 23 |
||
wago touch_panel_600_marine_firmware |
||
wago touch_panel_600_marine_firmware 22 |
||
wago touch_panel_600_marine_firmware 23 |
||
wago touch_panel_600_standard_firmware |
||
wago touch_panel_600_standard_firmware 22 |
||
wago touch_panel_600_standard_firmware 23 |
Vulmon