ICSA-20-065-01

WAGO I/O-CHECK

view advisory published 2020-03-05

Successful exploitation of these vulnerabilities could allow an attacker to change settings, delete the application, run remote code, cause a system crash, cause a denial-of-service condition, revert to factory settings, and overwrite MAC addresses.

describes (9)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-5082US	critical9.8	3.32% (89th)	—	2020-01-08
An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version…
CVE-2019-5080US	critical9.1OT elevated	1.87% (79th)	—	2019-12-18
An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PF…
CVE-2019-5079US	critical9.8	3.32% (89th)	—	2019-12-18
An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO…
CVE-2019-5078US	critical9.1OT elevated	1.65% (76th)	—	2019-12-18
An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC…
CVE-2019-5075US	critical9.8	3.87% (90th)	—	2019-12-18
An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC…
CVE-2019-5073US	medium5.3	1.62% (76th)	—	2019-12-18
An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO…
CVE-2019-5081US	critical9.8	4.52% (91st)	—	2019-12-18
An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(13) and 03.00.39(12), and WAGO…
CVE-2019-5077US	critical9.1OT elevated	1.64% (76th)	—	2019-12-18
An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO P…
CVE-2019-5074US	critical9.8	3.28% (88th)	—	2019-12-18
An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware ver…

references

External citations — patches, advisories, analysis.

ICS Advisory ICSA-20-065-01 JSONself
ICS Advisory ICSA-20-065-01 Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

remediations (27)

MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan