How severe is CVE-2022-3281?

CVE-2022-3281 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability none.

Is CVE-2022-3281 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (47th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2022-3281?

CVE-2022-3281 primarily affects Wago 750-8100 Firmware. In total, 78 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2022-3281?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2022-3281 published?

CVE-2022-3281 was published on 2022-10-17 and last updated on 2026-06-17.

CVE-2022-3281

CVE-2022-3281 is a high-severity vulnerability in Wago 750-8100 Firmware with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-440.

Key facts

Severity: High (CVSS 3.x base score 7.5)
EPSS exploit prediction: 1% (47th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-440
Affected product: Wago 750-8100 Firmware
Published: 2022-10-17
Last modified: 2026-06-17

Description

WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.

Frequently asked questions

What is CVE-2022-3281?: WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.
How severe is CVE-2022-3281?: CVE-2022-3281 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability none.
Is CVE-2022-3281 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (47th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2022-3281?: CVE-2022-3281 primarily affects Wago 750-8100 Firmware. In total, 78 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2022-3281?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2022-3281 published?: CVE-2022-3281 was published on 2022-10-17 and last updated on 2026-06-17.

References

https://cert.vde.com/en/advisories/VDE-2022-042/

Affected products (78)

cpe:2.3:o:wago:750-8100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8101_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8101\/000-010_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8101\/025-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8102_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8102\/025-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8202\/000-011_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8202\/000-012_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8202\/000-022_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8206_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8206\/025-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8206\/025-001_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8207_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8207\/025-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8207\/025-001_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8208_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8208\/025-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8208\/025-001_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8210_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8210\/025-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8211_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8212_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8212\/000-100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8212\/025-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8212\/025-001_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8212\/025-002_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8213_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8214_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8215_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8216_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8216\/025-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8216\/025-001_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8202\/040-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8206\/040-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8206\/040-001_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8210\/040-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8211\/040-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8212\/040-000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8212\/040-001_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:750-8212\/040-010_firmware:*:*:*:*:*:*:*:*

More vulnerabilities in Wago 750-8100 Firmware

CVE-2021-34569 — Critical (CVSS 9.8): In WAGO I/O-Check Service in multiple products an attacker can send a specially crafted packet containing OS commands…
CVE-2021-34566 — Critical (CVSS 9.1): In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet…
CVE-2021-34567 — High (CVSS 8.2): In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet…
CVE-2020-12069 — High (CVSS 7.8): In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system…
CVE-2021-34568 — High (CVSS 7.5): In WAGO I/O-Check Service in multiple products an unauthenticated remote attacker can send a specially crafted packet…
CVE-2022-22511 — Medium (CVSS 5.4): Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks. An authorized…

All CVEs affecting Wago 750-8100 Firmware →

Other CWE-440 vulnerabilities

CVE-2019-6569 — Critical (CVSS 9.1): The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into…
CVE-2024-32971 — Critical (CVSS 9.0): Apollo Router is a configurable, graph router written in Rust to run a federated supergraph that uses Apollo Federation…
CVE-2025-8850 — High (CVSS 8.8): In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA)…
CVE-2026-8806 — High (CVSS 8.7): Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module…
CVE-2018-12550 — High (CVSS 8.1): When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that ACL file is empty,…
CVE-2023-4807 — High (CVSS 7.8): Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the…

Browse all CWE-440 vulnerabilities →