CVE-2022-3738

mediumpriority · track · 24OT risk · elevatedEPSS 0.006 · 50 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.63% (50th) EPSS

CVSS 5.9 · medium

Is it mine?

28 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · wago_psirt

EPSS · scored 2026-10-27

The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedwago_psirt
Install FW22 Patch 1

cvss

Technical severity, 0–10. One row per scoring source.

5.9

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 2.2 · impact 3.6

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · info@cert.vde.comexploitability 2.2 · impact 3.6

v3.15.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · WAGO PSIRT DE

v3.15.4mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-306USCWE-306US

affected products (28)

Products and version ranges known to be affected.

WAGO Series WAGO PFC100≤ FW16 ≤FW22enisa_euvdEU
WAGO Series WAGO PFC200≤ FW16 ≤FW22enisa_euvdEU
WAGO Series WAGO Touch Panel 600 Advanced Line≤ FW16 ≤FW22enisa_euvdEU
WAGO Series WAGO Touch Panel 600 Marine Line≤ FW16 ≤FW22enisa_euvdEU
WAGO Series WAGO Touch Panel 600 Standard Line≤ FW16 ≤FW22enisa_euvdEU
WAGO WAGO Compact Controller CC100≤ FW16 ≤FW22enisa_euvdEU
WAGO WAGO Edge Controller≤ FW16 ≤FW22enisa_euvdEU
wago cc100 firmware16 → 22nvdUScpe:2.3:o:wago:cc100_firmware:*:*:*:*:*:*:*:*
wago edge controller firmware16 → 22nvdUScpe:2.3:o:wago:edge_controller_firmware:*:*:*:*:*:*:*:*
wago pfc100 firmware16 → 22nvdUScpe:2.3:o:wago:pfc100_firmware:*:*:*:*:*:*:*:*
wago pfc200 firmware16 → 22nvdUScpe:2.3:o:wago:pfc200_firmware:*:*:*:*:*:*:*:*
wago touch panel 600 advanced firmware16 → 22nvdUScpe:2.3:o:wago:touch_panel_600_advanced_firmware:*:*:*:*:*:*:*:*
wago touch panel 600 marine firmware16 → 22nvdUScpe:2.3:o:wago:touch_panel_600_marine_firmware:*:*:*:*:*:*:*:*
wago touch panel 600 standard firmware16 → 22nvdUScpe:2.3:o:wago:touch_panel_600_standard_firmware:*:*:*:*:*:*:*:*
Firmware FW16 <= FW22 installed on Series WAGO PFC100all versionswago_psirtDE
Firmware FW16 <= FW22 installed on Series WAGO PFC200all versionswago_psirtDE
Firmware FW16 <= FW22 installed on Series WAGO Touch Panel 600 Advanced Lineall versionswago_psirtDE
Firmware FW16 <= FW22 installed on Series WAGO Touch Panel 600 Marine Lineall versionswago_psirtDE
Firmware FW16 <= FW22 installed on Series WAGO Touch Panel 600 Standard Lineall versionswago_psirtDE
Firmware FW16 <= FW22 installed on WAGO Compact Controller CC100all versionswago_psirtDE

showing 20 of 28

advisories (1)

Vendor and ecosystem advisories describing this.

VDE-2022-054WAGO: Unauthenticated Configuration Export in web-based management in multiple devices2023-01-12csaf · wago_psirtDE
A vulnerability in the web-based management (WBM) of WAGOs programmable logic controller (PLC) could allow an unauthenticated remote attacker to retrieve sensitive information.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd wago_psirt NVD CVE.org MITRE

published 2023-01-19modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan