ICSA-20-065-01

WAGO I/O-CHECK

Advisory ansehen veröffentlicht 2020-03-05

Successful exploitation of these vulnerabilities could allow an attacker to change settings, delete the application, run remote code, cause a system crash, cause a denial-of-service condition, revert to factory settings, and overwrite MAC addresses.

beschreibt (9)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2019-5082US	critical9.8	3.32% (89th)	—	2020-01-08
An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version…
CVE-2019-5080US	critical9.1OT erhöht	1.87% (79th)	—	2019-12-18
An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PF…
CVE-2019-5079US	critical9.8	3.32% (89th)	—	2019-12-18
An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO…
CVE-2019-5078US	critical9.1OT erhöht	1.65% (76th)	—	2019-12-18
An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC…
CVE-2019-5075US	critical9.8	3.87% (90th)	—	2019-12-18
An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC…
CVE-2019-5073US	medium5.3	1.62% (76th)	—	2019-12-18
An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO…
CVE-2019-5081US	critical9.8	4.52% (91st)	—	2019-12-18
An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(13) and 03.00.39(12), and WAGO…
CVE-2019-5077US	critical9.1OT erhöht	1.64% (76th)	—	2019-12-18
An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO P…
CVE-2019-5074US	critical9.8	3.28% (88th)	—	2019-12-18
An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware ver…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

ICS Advisory ICSA-20-065-01 JSONself
ICS Advisory ICSA-20-065-01 Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

Behebungen (27)

MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationI/O-CHECK Series PFC100 and Series PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC100
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.
MitigationSeries PFC200
Disable unused TCP/UDP-ports.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan