CVE-2022-3738 WAGO: Missing authentication for config export functionality in multiple products
Remote unauthenticated attackers can download sensitive backup files containing credentials if a valid user creates a backup after reboot.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-3738?
CVE-2022-3738 is a medium-severity missing authorization vulnerability in Series WAGO PFC100, published on 19 Jan 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull.
Weakness: CWE-306
Which versions are affected by CVE-2022-3738?
It affects 7 products.
Products include Wago Cc100 Firmware, Wago Edge Controller Firmware, Wago Pfc100 Firmware, Wago Pfc200 Firmware, Wago Touch Panel 600 Advanced Firmware, Wago Touch Panel 600 Marine Firmware and 1 more.
How do I fix CVE-2022-3738?
No fix has been published for CVE-2022-3738 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2022-3738 being exploited?
There is no known exploitation of CVE-2022-3738 in the wild and no public exploit code.
Sources
Also known as GHSA-r52m-fm69-5vrj.