Not rated
CVE-2019-5073 An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO…
Description
An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause an external tool to fail, resulting in uninitialized stack data to be copied to the response packet buffer. An attacker can send unauthenticated packets to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WAGO PFC200 | Versions not published | |
| WAGO PFC100 | Versions not published |
Other CVEs of WAGO PFC200
The 9 CVEs of WAGO PFC200 →
CVE-2019-5082
An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO…
Not rated
CVE-2019-5078
An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200…
Not rated
CVE-2019-5075
An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200…
Not rated
CVE-2019-5080
An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC…
Not rated