Critical severity · published Mar 11, 2020
CVE-2019-5160
An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12)
9.1
CVSS
2.7%
EPSS
No
On KEV
Description
An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted HTTPS POST request can cause the software to connect to an unauthorized host, resulting in unauthorized access to firmware update functionality. An attacker can send an authenticated HTTPS POST request to direct the Cloud Connectivity software to connect to an attacker controlled Azure IoT Hub node.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PF
Pfc200 Firmware · Wago
03.00.39(12); 03.01.07(13); 03.02.02(14) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-5160
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-5160
Exploit
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0953
More from Pfc200 Firmware
9.8
CVE-2023-1698
WAGO: WBM Command Injection in multiple products
9.8
CVE-2022-45140
WAGO: Missing Authentication for Critical Function
9.8
CVE-2022-45138
WAGO: Missing Authentication for Critical Function
9.8
CVE-2019-5082
An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version…
9.8
CVE-2018-5459
An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X