WAGO: Multiple Vulnerabilities in I/O-Check Service in Multiple Devices
The reported vulnerabilities allow a remote attacker to change the setting, delete the application, set the device to factory defaults, code execution and to cause a system crash or denial of service. Note(s) The following products are affected by the listed vulnerabilities: Series PFC100 (750-81xx/xxx-xxx) Series PFC200 (750-82xx/xxx-xxx) The following products are affected by the vulnerability CVE-2019-5078 750-852, 750-831/xxx-xxx, 750-881, 750-880/xxx-xxx, 750-889 750-823, 750-832/xxx-xxx, 750-862, 750-890/xxx-xxx, 750-891
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-5082US | critical9.8 | — | ||
An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version… | ||||
| CVE-2019-5079US | critical9.8 | — | ||
An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO… | ||||
| CVE-2019-5078US | critical9.1OT elevated | — | ||
An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC… | ||||
| CVE-2019-5075US | critical9.8 | — | ||
An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC… | ||||
| CVE-2019-5073US | medium5.3 | — | ||
An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO… | ||||
| CVE-2019-5081US | critical9.8 | — | ||
An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(13) and 03.00.39(12), and WAGO… | ||||
| CVE-2019-5074US | critical9.8 | — | ||
An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware ver… | ||||
references
External citations — patches, advisories, analysis.
remediations (14)
- Mitigation
Restrict network access to the device. Do not directly connect the device to the internet. Disable unused TCP/UDP-ports
- Mitigation
Restrict network access to the device. Do not directly connect the device to the internet. Disable unused TCP/UDP-ports
- Mitigation
Restrict network access to the device. Do not directly connect the device to the internet. Disable unused TCP/UDP-ports
- Mitigation
Restrict network access to the device. Do not directly connect the device to the internet. Disable unused TCP/UDP-ports
- Mitigation
Restrict network access to the device. Do not directly connect the device to the internet. Disable unused TCP/UDP-ports
- Mitigation
Restrict network access to the device. Do not directly connect the device to the internet. Disable unused TCP/UDP-ports
- Mitigation
Restrict network access to the device. Do not directly connect the device to the internet. Disable unused TCP/UDP-ports
- Fixed
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the IP-port 6626 after commissioning. This is the easiest and securest way to protect your device for the listed vulnerabilities and for upcoming zero day exploits. Regardless of the action described above, the following CVEs can be fixed alternatively by a firmware update >= FW 15. CVE-2019-5073 CVE-2019-5074 CVE-2019-5075 CVE-2019-5079 CVE-2019-5081 CVE-2019-5082
- Fixed
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the IP-port 6626 after commissioning. This is the easiest and securest way to protect your device for the listed vulnerabilities and for upcoming zero day exploits. Regardless of the action described above, the following CVEs can be fixed alternatively by a firmware update >= FW 15. CVE-2019-5073 CVE-2019-5074 CVE-2019-5075 CVE-2019-5079 CVE-2019-5081 CVE-2019-5082
- Fixed
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the IP-port 6626 after commissioning. This is the easiest and securest way to protect your device for the listed vulnerabilities and for upcoming zero day exploits. Regardless of the action described above, the following CVEs can be fixed alternatively by a firmware update >= FW 15. CVE-2019-5073 CVE-2019-5074 CVE-2019-5075 CVE-2019-5079 CVE-2019-5081 CVE-2019-5082
- Fixed
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the IP-port 6626 after commissioning. This is the easiest and securest way to protect your device for the listed vulnerabilities and for upcoming zero day exploits. Regardless of the action described above, the following CVEs can be fixed alternatively by a firmware update >= FW 15. CVE-2019-5073 CVE-2019-5074 CVE-2019-5075 CVE-2019-5079 CVE-2019-5081 CVE-2019-5082
- Fixed
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the IP-port 6626 after commissioning. This is the easiest and securest way to protect your device for the listed vulnerabilities and for upcoming zero day exploits. Regardless of the action described above, the following CVEs can be fixed alternatively by a firmware update >= FW 15. CVE-2019-5073 CVE-2019-5074 CVE-2019-5075 CVE-2019-5079 CVE-2019-5081 CVE-2019-5082
- Fixed
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the IP-port 6626 after commissioning. This is the easiest and securest way to protect your device for the listed vulnerabilities and for upcoming zero day exploits. Regardless of the action described above, the following CVEs can be fixed alternatively by a firmware update >= FW 15. CVE-2019-5073 CVE-2019-5074 CVE-2019-5075 CVE-2019-5079 CVE-2019-5081 CVE-2019-5082
- Fixed
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the IP-port 6626 after commissioning. This is the easiest and securest way to protect your device for the listed vulnerabilities and for upcoming zero day exploits. Regardless of the action described above, the following CVEs can be fixed alternatively by a firmware update >= FW 15. CVE-2019-5073 CVE-2019-5074 CVE-2019-5075 CVE-2019-5079 CVE-2019-5081 CVE-2019-5082
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan