CVE-2022-3281: WAGO 750-81xx/xxx-xxx Series PFC100/PFC200, друго

Описание

Оригинално описание

WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.

Засегнати продукти

• WAGO 750-81xx/xxx-xxx Series PFC100/PFC200: 03.01.07(13) до 03.10.08(22)
• WAGO 750-8217/xxx-xxx Series PFC100/PFC200: 03.04.10(16) до 03.10.08(22)
• WAGO 750-82xx/xxx-xxx Series PFC100/PFC200: 03.01.07(13) до 03.10.08(22)
• WAGO Compact Controller CC100: 03.07.17(19) до 03.09.08(21)
• WAGO 762-4xxx Series Touch Panel 600: 03.01.07(13) до 03.10.09(22)
• WAGO 762-5xxx Series Touch Panel 600: 03.01.07(13) до 03.10.09(22)
• WAGO 762-6xxx Series Touch Panel 600: 03.01.07(13) до 03.10.09(22)
• WAGO 752-8303/8000-002 Edge Controller: 03.06.09(18) до 03.10.09(22)

Вид слабост

• CWE-440 Нарушаване на очакваното поведение

История

Други уязвимости в WAGO 750-81xx/xxx-xxx Series PFC100/PFC200

• 2.7CVE-2023-4089
• 9.8CVE-2023-1698

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-3281
• https://nvd.nist.gov/vuln/detail/CVE-2022-3281
• https://cert.vde.com/en/advisories/VDE-2022-042/