WAGO: multiple products - Loss of MAC-Address-Filtering after reboot
Published Oct 17, 2022
7.5
HIGHCVSS 3.1
EPSS 0.73%
Description
WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.
Affected products
-
- Version 03.01.07(13)StatusaffectedConstraints<=03.10.08(22)
- Version
-
- Version 03.04.10(16)StatusaffectedConstraints<=03.10.08(22)
- Version
-
- Version 03.01.07(13)StatusaffectedConstraints<=03.10.08(22)
- Version
-
- Version 03.06.09(18)StatusaffectedConstraints<=03.10.09(22)
- Version
-
- Version 03.01.07(13)StatusaffectedConstraints<=03.10.09(22)
- Version
-
- Version 03.01.07(13)StatusaffectedConstraints<=03.10.09(22)
- Version
-
- Version 03.01.07(13)StatusaffectedConstraints<=03.10.09(22)
- Version
-
- Version 03.07.17(19)StatusaffectedConstraints<=03.09.08(21)
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| WAGO | 750-81xx/xxx-xxx Series PFC100/PFC200 | n/a |
| ||||||
| WAGO | 750-8217/xxx-xxx Series PFC100/PFC200 | n/a |
| ||||||
| WAGO | 750-82xx/xxx-xxx Series PFC100/PFC200 | n/a |
| ||||||
| WAGO | 752-8303/8000-002 Edge Controller | n/a |
| ||||||
| WAGO | 762-4xxx Series Touch Panel 600 | n/a |
| ||||||
| WAGO | 762-5xxx Series Touch Panel 600 | n/a |
| ||||||
| WAGO | 762-6xxx Series Touch Panel 600 | n/a |
| ||||||
| WAGO | Compact Controller CC100 | n/a |
|
Configuration 1
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 2
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 3
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 4
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 5
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 6
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 7
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 8
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 9
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 10
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 11
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 12
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 13
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 14
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 15
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 16
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 17
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 18
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 19
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 20
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 21
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 22
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 23
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 24
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 25
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 26
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 27
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 28
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 29
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 30
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Configuration 31
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 32
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 33
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 34
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 35
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 36
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 37
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 38
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 39
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 40
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 41
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 42
- ≥ 03.01.07\(13\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 43
- ≥ 03.04.10\(16\) · ≤ 03.10.08\(22\)
Configuration 44
- ≥ 03.04.10\(16\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 45
- ≥ 03.04.10\(16\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 46
- ≥ 03.04.10\(16\) · ≤ 03.10.08\(22\)
Running on/with
- n/a
Configuration 47
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 48
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 49
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 50
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 51
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 52
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 53
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 54
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 55
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 56
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 57
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Configuration 58
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Configuration 59
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Configuration 60
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Configuration 61
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 62
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 63
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 64
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 65
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 66
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 67
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 68
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 69
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 70
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 71
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 72
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 73
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 74
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 75
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 76
- ≥ 03.01.07\(13\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 77
- ≥ 03.06.09\(18\) · ≤ 03.10.09\(22\)
Running on/with
- n/a
Configuration 78
- ≥ 03.07.17\(19\) · ≤ 03.09.08\(21\)
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
YesTechnical Impact
PartialDecision
n/aAssessed May 10, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (11 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 3, 2026 | 0.73% (0.00725) | 52.45th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.66% (0.00656) | 46.38th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.07% (0.00069) | 18.49th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.15% (0.00151) | 52.72th | v3 (v2023.03.01) |
| May 9, 2024 | 0.15% (0.00151) | 51.06th | v3 (v2023.03.01) |
| Mar 29, 2024 | 0.13% (0.00128) | 46.69th | v3 (v2023.03.01) |
| Oct 24, 2023 | 0.12% (0.00116) | 45.02th | v3 (v2023.03.01) |
| Sep 17, 2023 | 0.08% (0.00080) | 33.37th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.08% (0.00076) | 30.49th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.05% (0.01055) | 52.13th | v2 (v2022.01.01) |
| Oct 18, 2022 | 1.05% (0.01055) | 50.73th | v2 (v2022.01.01) |
References (1)
- https://cert.vde.com/en/advisories/VDE-2022-042/ MitigationThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://cert.vde.com/en/advisories/VDE-2022-042/ | MitigationThird Party Advisory |
Change history (0)
No recorded changes yet.