WAGO PFC200 Firmware 03.01.07(13)
Approved changes feed: RSS · Atom
cpe:2.3:o:wago:pfc200_firmware:03.01.07\(13\):*:*:*:*:*:*:*
part: o version: 03.01.07(13) update: *
| Vendor | Wago (32ab7757-de27-5378-a269-9c7ac714c35b) |
|---|---|
| Product | Pfc200 Firmware (9097fb16-0d4a-5396-a2c2-b6c43bb2e096) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-5161 |
vulnerable | 2026-06-08 05:13:57.778014 |
Details available
An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted XML file will direct the Cloud Connectivity service to download and execute a shell script with root privileges.
Published: 2020-03-10T23:32:14.000Z
Updated: 2024-08-04T19:47:56.616Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5160 |
vulnerable | 2026-06-08 05:13:57.777488 |
Details available
An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted HTTPS POST request can cause the software to connect to an unauthorized host, resulting in unauthorized access to firmware update functionality. An attacker can send an authenticated HTTPS POST request to direct the Cloud Connectivity software to connect to an attacker controlled Azure IoT Hub node.
Published: 2020-03-10T22:35:44.000Z
Updated: 2024-08-04T19:47:56.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5157 |
vulnerable | 2026-06-08 05:13:57.773544 |
Details available
An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject OS commands into the TimeoutUnconfirmed parameter value contained in the Firmware Update command.
Published: 2020-03-10T23:14:31.000Z
Updated: 2024-08-04T19:47:56.654Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5156 |
vulnerable | 2026-06-08 05:13:57.773050 |
Details available
An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command.
Published: 2020-03-10T23:14:34.000Z
Updated: 2024-08-04T19:47:56.664Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5155 |
vulnerable | 2026-06-08 05:13:57.771030 |
Details available
An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in the firmware update command. This affects WAGO PFC200 Firmware version 03.02.02(14), version 03.01.07(13), and version 03.00.39(12)
Published: 2020-03-10T21:59:24.000Z
Updated: 2024-08-04T19:47:56.642Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5149 |
vulnerable | 2026-06-08 05:13:57.762718 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5135 |
vulnerable | 2026-06-08 05:13:57.740949 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5134 |
vulnerable | 2026-06-08 05:13:57.740309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5082 |
vulnerable | 2026-06-08 05:13:57.660661 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.