Is CVE-2022-3281 actively exploited?

No active exploitation of CVE-2022-3281 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-3281 be exploited remotely?

Yes. CVE-2022-3281 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2022-3281?

CVE-2022-3281 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2022-3281

HIGH

CVE-2022-3281

CWE-440Published: October 17, 2022· Updated: Jun 17, 2026

7.5

CVSS v3.1

Official Description

WAGO Series PFC100/PFC200, Series Touch Panel 600, Compact Controller CC100 and Edge Controller in multiple versions are prone to a loss of MAC-Address-Filtering after reboot. This may allow an remote attacker to circumvent the reach the network that should be protected by the MAC address filter.

NVD Source

Technical Analysis

CVE-2022-3281 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in full integrity compromise (data manipulation), with a CVSS base score of 7.5.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityHigh

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Vendors & Products

wago156 product(s)

750-8100 firmware750-8100750-8101 firmware750-8101750-8101\/000-010 firmware750-8101\/000-010750-8101\/025-000 firmware750-8101\/025-000750-8102 firmware750-8102750-8102\/025-000 firmware750-8102\/025-000+144

Source: NVD CPE · 156 total CPE entries