CVE:CVE-2022-45140
CNNVD:CNNVD-202302-2111
WAGO Series PFC100等都是德国万可（WAGO）公司的产品。WAGO Series PFC100是一款可编程逻辑控制器。WAGO Series PFC200是一款可编程逻辑控制器。WAGO Edge Controller是一个边缘控制器。
多款WAGO产品存在访问控制错误漏洞。攻击者利用该漏洞以root权限将任意数据写入存储，并远程执行代码。以下产品受到影响：Compact Controller CC100、 Edge Controller、 PFC100、Touch Panel 600 Advanced Line、 Touch Panel 600 Marine Line、 Touch Panel 600 Standard Line。
solution:Upgrade wago 751-9301_firmware to a higher version than 22,22,23,and avoid the version [16,22),22,23; Upgrade wago 752-8303/8000-002_firmware to a higher version than 22,22,23,and avoid the version [18,22),22,23; Upgrade wago pfc100_firmware to a higher version than 22,22,23,and avoid the version [16,22),22,23; Upgrade wago pfc200_firmware to a higher version than 22,22,23,and avoid the version [16,22),22,23; Upgrade wago touch_panel_600_advanced_firmware to a higher version than 22,22,23,and avoid the version [16,22),22,23; Upgrade wago touch_panel_600_marine_firmware to a higher version than 22,22,23,and avoid the version [16,22),22,23; Upgrade wago touch_panel_600_standard_firmware to a higher version than 22,22,23,and avoid the version [16,22),22,23