High severity · published Mar 11, 2020
CVE-2019-5156
An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12)
7.2
CVSS
4.2%
EPSS
No
On KEV
Description
An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PF
Pfc200 Firmware · Wago
03.00.39(12); 03.01.07(13); 03.02.02(14) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-5156
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-5156
Exploit
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0949
More from Pfc200 Firmware
9.8
CVE-2023-1698
WAGO: WBM Command Injection in multiple products
9.8
CVE-2022-45140
WAGO: Missing Authentication for Critical Function
9.8
CVE-2022-45138
WAGO: Missing Authentication for Critical Function
9.8
CVE-2019-5082
An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version…
9.8
CVE-2018-5459
An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X