CVE-2022-45139 | BDVDB-2026-196267 Detail
WAGOCompact Controller CC100 (751-9301)
Description#
A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of confidentiality.
Impact#
CAPEC-554 Functionality Bypass
Weaknesses#
- CWE-346 Origin Validation Error
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.