Approved changes feed: RSS · Atom

cpe:2.3:a:wago:wago_pfc200:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWago (32ab7757-de27-5378-a269-9c7ac714c35b)
ProductWago Pfc200 (4d84a3e2-6fbf-5bc2-b08d-54d71905f5e7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5182 vulnerable 2026-06-08 05:13:57.794148 Details available
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x440 is overflowed with the call to sprintf() for any type values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled config-type=‘) in length. A type value of length 0x3d9 will cause the service to crash.
Published: 2020-03-11T22:09:44.000Z
Updated: 2024-08-04T19:47:56.628Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5181 vulnerable 2026-06-08 05:13:57.793800 Details available
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any subnetmask values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled subnet-mask=‘) in length. A subnetmask value of length 0x3d9 will cause the service to crash.
Published: 2020-03-11T23:31:09.000Z
Updated: 2024-08-04T19:47:56.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5180 vulnerable 2026-06-08 05:13:57.791271 Details available
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any ip values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled ip-address=‘) in length. A ip value of length 0x3da will cause the service to crash.
Published: 2020-03-11T23:30:46.000Z
Updated: 2024-08-04T19:47:56.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5179 vulnerable 2026-06-08 05:13:57.790956 Details available
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.
Published: 2020-03-11T23:30:26.000Z
Updated: 2024-08-04T19:47:56.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5178 vulnerable 2026-06-08 05:13:57.790563 Details available
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any hostname values that are greater than 1024-len(‘/etc/config-tools/change_hostname hostname=‘) in length. A hostname value of length 0x3fd will cause the service to crash.
Published: 2020-03-11T23:25:15.000Z
Updated: 2024-08-04T19:47:56.734Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5177 vulnerable 2026-06-08 05:13:57.790254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5176 vulnerable 2026-06-08 05:13:57.789825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5175 vulnerable 2026-06-08 05:13:57.789355 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5173 vulnerable 2026-06-08 05:13:57.788637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5172 vulnerable 2026-06-08 05:13:57.788202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5171 vulnerable 2026-06-08 05:13:57.787877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5170 vulnerable 2026-06-08 05:13:57.787526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5169 vulnerable 2026-06-08 05:13:57.787076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.