wago Vulnerability Advisory Catalog

Total 110 security vulnerabilities recorded for wago software and firmware.

← Back to All Vendors
Component: pfc200_firmware

An exploitable command injection vulnerability exists in the iocheckd service โ€˜I/O-Checkโ€™ function of the WAGO PFC 200 version 03.02.02(14). At 0x1e3f...

๐Ÿ“… 2020-03-11
CVSS 7.8 Dossier →
Component: pfc200_firmware

An exploitable stack buffer overflow vulnerability exists in the iocheckd service โ€˜I/O-Checkโ€™ functionality of WAGO PFC 200 version 03.02.02(14). A sp...

๐Ÿ“… 2020-03-11
CVSS 7.8 Dossier →
CVE-2019-5161 CRITICAL
Component: pfc200_firmware

An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), ...

๐Ÿ“… 2020-03-11
CVSS 9.1 Dossier →
CVE-2019-5160 CRITICAL
Component: pfc200_firmware

An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03...

๐Ÿ“… 2020-03-11
CVSS 9.1 Dossier →
Component: e\!cockpit

An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.6.0.7. A s...

๐Ÿ“… 2020-03-11
CVSS 7.8 Dossier →
Component: e\!cockpit

An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5...

๐Ÿ“… 2020-03-11
CVSS 7.8 Dossier →
Component: pfc200_firmware

An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(...

๐Ÿ“… 2020-03-11
CVSS 7.2 Dossier →
Component: pfc200_firmware

An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and ...

๐Ÿ“… 2020-03-11
CVSS 7.2 Dossier →
Component: pfc200_firmware

An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system comman...

๐Ÿ“… 2020-03-11
CVSS 7.2 Dossier →
Component: pfc200_firmware

The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web server and ma...

๐Ÿ“… 2020-03-11
CVSS 7.5 Dossier →
CVE-2019-5135 MEDIUM
Component: pfc200_firmware

An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO P...

๐Ÿ“… 2020-03-11
CVSS 5.3 Dossier →
Component: pfc200_firmware

An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 v...

๐Ÿ“… 2020-03-11
CVSS 7.5 Dossier →
Component: e\!cockpit

A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to...

๐Ÿ“… 2020-03-11
CVSS 7.5 Dossier →
CVE-2019-5106 MEDIUM
Component: e\!cockpit

A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to com...

๐Ÿ“… 2020-03-11
CVSS 5.5 Dossier →
CVE-2019-5082 CRITICAL
Component: pfc200_firmware

An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13),...

๐Ÿ“… 2020-01-08
CVSS 9.8 Dossier →
CVE-2019-5080 CRITICAL
Component: pfc_200_firmware

An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13)...

๐Ÿ“… 2019-12-18
CVSS 9.1 Dossier →
CVE-2019-5079 CRITICAL
Component: pfc_200_firmware

An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(1...

๐Ÿ“… 2019-12-18
CVSS 9.8 Dossier →
CVE-2019-5078 CRITICAL
Component: pfc_200_firmware

An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) ...

๐Ÿ“… 2019-12-18
CVSS 9.1 Dossier →
CVE-2019-5075 CRITICAL
Component: pfc_200_firmware

An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) ...

๐Ÿ“… 2019-12-18
CVSS 9.8 Dossier →
CVE-2019-5073 MEDIUM
Component: pfc_200_firmware

An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(1...

๐Ÿ“… 2019-12-18
CVSS 5.3 Dossier →
CVE-2019-5081 CRITICAL
Component: pfc_200_firmware

An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(...

๐Ÿ“… 2019-12-18
CVSS 9.8 Dossier →
CVE-2019-5077 CRITICAL
Component: pfc_200_firmware

An exploitable denial-of-service vulnerability exists in the iocheckd service โ€˜โ€™I/O-Checโ€™โ€™ functionality of WAGO PFC 200 Firmware versions 03.01.07(13...

๐Ÿ“… 2019-12-18
CVSS 9.1 Dossier →
CVE-2019-5074 CRITICAL
Component: pfc_200_firmware

An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.07...

๐Ÿ“… 2019-12-18
CVSS 9.8 Dossier →
Component: pfc_firmware

Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control. A remote attacker can check fo...

๐Ÿ“… 2019-10-19
CVSS 5.3 Dossier →
Page 4 of 5 (110 Total Records)