CVE-2022-22511— WAGO PLCs WBM vulnerable to reflected XSS
Quick assessment
Affected
WAGO Compact Controller CC100 (751-9301)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WAGO PLC是德国万可（WAGO）的一款可编程逻辑控制器。 WAGO PLC 存在跨站脚本漏洞，具有用户权限的授权攻击者可以使用它来访问连接到 WBM 的 PC 上的机密信息。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1589 · Gather Victim Identity Information
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-22511
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WAGO PLCs WBM vulnerable to reflected XSS
Source: CVE Program / CVE List V5
Vulnerability Description
Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized attacker with user privileges may use this to gain access to confidential information on a PC that connects to the WBM after it has been compromised.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
WAGO PLC 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WAGO PLC是德国万可（WAGO）的一款可编程逻辑控制器。 WAGO PLC 存在跨站脚本漏洞，具有用户权限的授权攻击者可以使用它来访问连接到 WBM 的 PC 上的机密信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WAGO | Compact Controller CC100 (751-9301) | FW16 ~ FW22 | - |
|
| WAGO | Edge Controller (752-8303/8000-002) | FW16 ~ FW22 | - |
|
| WAGO | Series PFC100 (750-81xx/xxx-xxx) | FW16 ~ FW22 | - |
|
| WAGO | Series PFC200 (750-82xx/xxx-xxx) | FW16 ~ FW22 | - |
|
| WAGO | Series Touch Panel 600 Advanced Line (762-5xxx) | FW16 FW22 | - |
|
| WAGO | Series Touch Panel 600 Marine Line (762-6xxx) | FW16 FW22 | - |
|
| WAGO | Series Touch Panel 600 Standard Line (762-4xxx) | FW16 FW22 | - |
|
II. Public POCs for CVE-2022-22511
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-22511
请登录查看更多情报信息。
Other References for CVE-2022-22511 (1)
-
https://cert.vde.com/en/advisories/VDE-2022-004/ x_refsource_CONFIRM
IV. Related Vulnerabilities
Same product: Compact Controller CC100 (751-9301)
Same vendor: WAGO
-
CVE-2025-41753
Path traversal in dynamically created BACnet File Objects -
CVE-2026-4769
Unauthenticated Access to Internal Diagnostic Interface -
CVE-2023-5872
Wago: Vulnerability in Smart Designer Web-Application -
CVE-2024-1490
Wago: Vulnerability in WBM through Open VPN -
CVE-2026-2328
Backend Access Due to Insufficient Input Validation
Same weakness: CWE-79
-
CVE-2026-115897
Serialize JavaScript: Cross-site scripting (XSS) via unescap -
CVE-2026-87901
注册模块不当清理导致反射型跨站脚本漏洞 -
CVE-2026-102786
Joomla Extension - phoca.cz - Authenticated stored cross-sit -
CVE-2026-55486
Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — C -
CVE-2026-112333
GFI Archiver < 15.14 Stored XSS via MailInsights.aspx
V. Comments for CVE-2022-22511
No comments yet