CVE-2022-50926

WAGO 750-8212 PFC200 G2 2ETH RS firmware contains a privilege escalation vulnerability that allows attackers to manipulate user session cookies. Attackers can modify the cookie's 'name' and 'roles' parameters to elevate from ordinary user to administrative privileges without authentication.

CVSS v4.0

8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.51% chance of exploitation in the next 30 days, 41th percentile

Published

2026-01-13

Updated

2026-01-14

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/50793

References

• CVE Record
• NVD entry

Related

• CVE-2022-50925
• CVE-2022-50927
• CVE-2022-50924
• CVE-2022-50928
• CVE-2022-50923
• CVE-2022-50929