CVE-2022-3281 HIGH

CVE-2022-3281: WAGO: multiple products - Loss of MAC-Address-Filtering after reboot

Vendor Wago
Product 750-81xx/xxx-xxx Series PFC100/PFC200
Weakness CWE-440
Published October 17, 2022
Last update May 10, 2025

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.

Key dates

02Disclosure timeline

October 17, 2022 CVE published
May 10, 2025 Record updated