CVE-2022-3281

WAGO: multiple products - Loss of MAC-Address-Filtering after reboot

State: Published
Severity: 7.5 High
Published: Oct 17, 2022
Updated: May 10, 2025
Reserved: Sep 23, 2022

Description

WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	CERTVDE

Weaknesses

CWE-440 Expected Behavior Violation

Affected Products

Product	Versions
750-81xx/xxx-xxx Series PFC100/PFC200WAGO	03.01.07(13) through 03.10.08(22)Affected
750-8217/xxx-xxx Series PFC100/PFC200WAGO	03.04.10(16) through 03.10.08(22)Affected
750-82xx/xxx-xxx Series PFC100/PFC200WAGO	03.01.07(13) through 03.10.08(22)Affected
Compact Controller CC100WAGO	03.07.17(19) through 03.09.08(21)Affected
762-4xxx Series Touch Panel 600WAGO	03.01.07(13) through 03.10.09(22)Affected
762-5xxx Series Touch Panel 600WAGO	03.01.07(13) through 03.10.09(22)Affected
762-6xxx Series Touch Panel 600WAGO	03.01.07(13) through 03.10.09(22)Affected
752-8303/8000-002 Edge ControllerWAGO	03.06.09(18) through 03.10.09(22)Affected

References

https://cert.vde.com/en/advisories/VDE-2022-042/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.