WAGO PFC 200
Approved changes feed: RSS · Atom
cpe:2.3:h:wago:pfc_200:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Wago (32ab7757-de27-5378-a269-9c7ac714c35b) |
|---|---|
| Product | Pfc 200 (73113ec4-7bb6-522a-9ec8-438767d87ab5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-5167 |
not_vulnerable | 2026-06-08 05:13:57.783309 |
Details available
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). At 0x1e3f0 the extracted dns value from the xml file is used as an argument to /etc/config-tools/edit_dns_server %s dns-server-nr=%d dns-server-name=<contents of dns node> using sprintf(). This command is later executed via a call to system(). This is done in a loop and there is no limit to how many dns entries will be parsed from the xml file.
Published: 2020-03-10T22:25:48.000Z
Updated: 2024-08-04T19:47:56.596Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5081 |
not_vulnerable | 2026-06-08 05:13:57.655723 |
Details available
An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a heap buffer overflow, potentially resulting in code execution. An attacker can send unauthenticated packets to trigger this vulnerability.
Published: 2019-12-18T19:59:36.000Z
Updated: 2024-08-04T19:47:56.625Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5080 |
not_vulnerable | 2026-06-08 05:13:57.654906 |
Details available
An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A single packet can cause a denial of service and weaken credentials resulting in the default documented credentials being applied to the device. An attacker can send an unauthenticated packet to trigger this vulnerability.
Published: 2019-12-18T20:35:41.000Z
Updated: 2024-08-04T19:47:56.073Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5079 |
not_vulnerable | 2026-06-08 05:13:57.654289 |
Details available
An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a heap buffer overflow, potentially resulting in code execution. An attacker can send unauthenticated packets to trigger this vulnerability.
Published: 2019-12-18T20:33:07.000Z
Updated: 2024-08-04T19:47:56.879Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5078 |
not_vulnerable | 2026-06-08 05:13:57.653743 |
Details available
An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a denial of service, resulting in the device entering an error state where it ceases all network communications. An attacker can send unauthenticated packets to trigger this vulnerability.
Published: 2019-12-18T20:51:53.000Z
Updated: 2024-08-04T19:47:56.805Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5077 |
not_vulnerable | 2026-06-08 05:13:57.653176 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5075 |
not_vulnerable | 2026-06-08 05:13:57.649103 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5074 |
not_vulnerable | 2026-06-08 05:13:57.648646 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5073 |
not_vulnerable | 2026-06-08 05:13:57.646888 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.