A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of confidentiality.
The product does not properly verify that the source of data or communication is valid.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| 751-9301_firmware | Wago | 16 (including) | 22 (excluding) |
| 751-9301_firmware | Wago | 22 (including) | 22 (including) |
| 751-9301_firmware | Wago | 23 (including) | 23 (including) |