Wago Pfc200 Firmware vulnerabilities

CVE-2019-5149 [HIGH] CWE-400 CVE-2019-5149: The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web server and makes use of the FastCGI module, which is intended to provide high performance for all Internet applications without the penalties of Web server APIs. However, the default configuration of this module appears

CVE-2019-5168 [HIGH] CWE-78 CVE-2019-5168: An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function o An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). An attacker can send a specially crafted XML cache file At 0x1e8a8 the extracted domainname value from the xml file is used as an argument to /etc/config-tools/edit_dns_server domain-name= using sprintf().This comma

CVE-2019-5181 [HIGH] CWE-787 CVE-2019-5181: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted p

CVE-2019-5166 [HIGH] CWE-787 CVE-2019-5166: An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functi An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger the pa

CVE-2019-5180 [HIGH] CWE-787 CVE-2019-5180: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any ip values that

CVE-2019-5179 [HIGH] CWE-787 CVE-2019-5179: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.

CVE-2019-5178 [HIGH] CWE-787 CVE-2019-5178: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any hostname value

CVE-2019-5184 [HIGH] CWE-415 CVE-2019-5184: An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can cause a heap pointer to be freed twice, resulting in a denial of service and potentially code execution. An attacker can send a specially crafted packet to

CVE-2022-3738 [MEDIUM] CWE-306 CVE-2022-3738: The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull.

CVE-2019-5185 [HIGH] CWE-787 CVE-2019-5185: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1ea28 the extracted state value from the xml file is used as an argument to /etc/config-tools/config_interfaces interfac

CVE-2019-5186 [HIGH] CWE-120 CVE-2019-5186: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1eb9c the extracted interface element name from the xml file is used as an argument to /etc/config-tools/config_interface

CVE-2019-5135 [MEDIUM] CWE-327 CVE-2019-5135: An exploitable timing discrepancy vulnerability exists in the authentication functionality of the We An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt() function which can be exploited to disclose hashed user credentials. This affects WAGO PFC200 Firmware version 03.00.39(12) and ver

CVE-2023-3379 [MEDIUM] CWE-863 CVE-2023-3379: Wago web-based management of multiple products has a vulnerability which allows an local authenticat Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges.

CVE-2022-45139 [MEDIUM] CVE-2022-45139: A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misu A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of information readable the impact only affects a small subset of c

CVE-2022-45137 [MEDIUM] CWE-79 CVE-2022-45137: The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scr The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.

CVE-2019-5182 [MEDIUM] CWE-787 CVE-2019-5182: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x440 is overflowed with the call to sprintf() for any type values t

CVE-2019-5177 [MEDIUM] CWE-787 CVE-2019-5177: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). The destination buffer sp+0x440 is overflowed with the call to sprintf() for any domainname values that are greater than 1024-len(‘/etc/config-tools/edit_dns_server domain-name=‘) in l

CVE-2019-5176 [MEDIUM] CWE-787 CVE-2019-5176: An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x40 is overflowed with the call to sprintf() for any gateway values

CVE-2023-4089 [LOW] CWE-610 CVE-2023-4089: On affected Wago products an remote attacker with administrative privileges can access files to whic On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.