CVE-2022-50926
WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation
- State
- Published
- Severity
- 8.7 High
- Published
- Jan 13, 2026
- Updated
- Oct 27, 2026
- Reserved
- Jan 11, 2026
Description
WAGO 750-8212 PFC200 G2 2ETH RS firmware contains a privilege escalation vulnerability that allows attackers to manipulate user session cookies. Attackers can modify the cookie's 'name' and 'roles' parameters to elevate from ordinary user to administrative privileges without authentication.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-565 Reliance on Cookies without Validation and Integrity Checking
Affected Products
| Product | Versions |
|---|---|
WAGO 750-8212 PFC200Wago |
|
References
- ExploitDB-50793exploit
- Official Vendor Homepageproduct
- VulnCheck Advisory: WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalationthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.