CVE-2018-5459
highpriority · track · 40EPSS 0.027 · 86 %ileEUUSEPSS · scored 2026-10-27
An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- Fixed750-8202cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8202/025-000cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8202/025-001cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8202/025-002cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8202/040-001cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8203cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8203/025-000cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8204cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8204/025-000cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8206cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8206/025-000cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8206/025-001cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8207cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8207/025-000cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8207/025-001cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8208cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - Fixed750-8208/025-000cisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf - FixedCoDeSyscisa_csaf_ot
WAGO released a security patch with FW11 available at:
http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdf
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (39)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-18-044-01WAGO PFC200 Series2018-02-13icsa · cisa_csaf_otUS
ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (4)
External citations — patches, advisories, analysis.
- http://global.wago.com/media/2_products/security/Sec-Advisory_CoDeSys.pdfPatchcnnvd
- https://ics-cert.us-cert.gov/advisories/ICSA-18-044-01cnnvd
- https://ics-cert.us-cert.gov/advisories/ICSA-18-044-01enisa_euvd
- https://ics-cert.us-cert.gov/advisories/ICSA-18-044-01Third Party AdvisoryUS Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan