CVE-2019-5075
highPriorität · verfolgen · 40EPSS 0.039 · 90. PerzentilDEEUUSEPSS · bewertet 2026-10-27
An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets sent to the iocheckd service "I/O-Check" can cause a stack buffer overflow in the sub-process getcouplerdetails, resulting in code execution. An attacker can send unauthenticated packets to trigger this vulnerability.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- Behobenwago_psirt
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the IP-port 6626 after commissioning. This is the easiest and securest way to protect your device for the listed vulnerabilities and for upcoming zero day exploits. Regardless of the action described above, the following CVEs can be fixed alternatively by a firmware update >= FW 15. CVE-2019-5073 CVE-2019-5074 CVE-2019-5075 CVE-2019-5079 CVE-2019-5081 CVE-2019-5082
- Mitigationwago_psirt
Restrict network access to the device. Do not directly connect the device to the internet. Disable unused TCP/UDP-ports
- MitigationI/O-CHECK Series PFC100 and Series PFC200cisa_csaf_ot
Disable unused TCP/UDP-ports.
- MitigationSeries PFC100cisa_csaf_ot
Disable unused TCP/UDP-ports.
- MitigationSeries PFC200cisa_csaf_ot
Disable unused TCP/UDP-ports.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 9–10
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (37)
Betroffene Produkte und Versionsbereiche.
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- VDE-2019-022WAGO: Multiple Vulnerabilities in I/O-Check Service in Multiple Devices2019-12-16csaf · wago_psirtDE
The reported vulnerabilities allow a remote attacker to change the setting, delete the application, set the device to factory defaults, code execution and to cause a system crash or denial of service. Note(s) The following products are affected by the listed vulnerabilities: Series PFC100 (750-81xx/xxx-xxx) Series PFC200 (750-82xx/xxx-xxx) The following products are affected by the vulnerability CVE-2019-5078 750-852, 750-831/xxx-xxx, 750-881, 750-880/xxx-xxx, 750-889 750-823, 750-832/xxx-xxx, 750-862, 750-890/xxx-xxx, 750-891
- ICSA-20-065-01WAGO I/O-CHECK2020-03-05icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to change settings, delete the application, run remote code, cause a system crash, cause a denial-of-service condition, revert to factory settings, and overwrite MAC addresses.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (9)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.nsfocus.net/vulndb/47153cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2019-5075cnnvd
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0864cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.0842/cnnvd
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0864cnnvd
- https://www.us-cert.gov/ics/advisories/icsa-20-065-01cnnvd
- https://www.wago.comPatchcnnvd
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0864enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan