CVE-2022-22511
WAGO PLCs WBM vulnerable to reflected XSS
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
CVSS 3.1 · 5.4 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products