Is CVE-2022-45139 actively exploited?

No active exploitation of CVE-2022-45139 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-45139 be exploited remotely?

Yes. CVE-2022-45139 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2022-45139?

CVE-2022-45139 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2022-45139

MEDIUM

CVE-2022-45139

CWE-346Published: February 27, 2023· Updated: Jun 17, 2026

5.3

CVSS v3.1

Official Description

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of confidentiality.

NVD Source

Technical Analysis

CVE-2022-45139 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityLow

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Vendors & Products

wago14 product(s)

751-9301 firmware751-9301752-8303\/8000-002 firmware752-8303\/8000-002pfc100 firmwarepfc100pfc200 firmwarepfc200touch panel 600 advanced firmwaretouch panel 600 advancedtouch panel 600 marine firmwaretouch panel 600 marine+2

Source: NVD CPE · 28 total CPE entries