Wago Wago Pfc200 Firmware
12 CVEs affecting Wago Wago Pfc200 Firmware. Latest disclosed: 2020-03-11. Critical: 2, High: 9.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-5161 | Critical | 9.1 | 2020-03-11 | An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00… |
CVE-2019-5160 | Critical | 9.1 | 2020-03-11 | An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13… |
CVE-2019-5174 | High | 7.8 | 2020-03-11 | An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). A specially crafte… |
CVE-2019-5168 | High | 7.8 | 2020-03-11 | An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). An attacker can se… |
CVE-2019-5167 | High | 7.8 | 2020-03-11 | An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). At 0x1e3f0 the ext… |
CVE-2019-5166 | High | 7.8 | 2020-03-11 | An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14). A specially c… |
CVE-2019-5149 | High | 7.5 | 2020-03-11 | The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web server and makes use o… |
CVE-2019-5134 | High | 7.5 | 2020-03-11 | An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 0… |
CVE-2019-5157 | High | 7.2 | 2020-03-11 | An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and… |
CVE-2019-5156 | High | 7.2 | 2020-03-11 | An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(… |
CVE-2019-5155 | High | 7.2 | 2020-03-11 | An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into a… |
CVE-2019-5135 | Medium | 5.3 | 2020-03-11 | An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200… |