PF
Product
Pfc200 Firmware
40
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 23Medium 8Low 1
Watch
Add Pfc200 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-45137 | 6.1 | Feb 27 | The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser Affected: 16 before 22; 22; 23 |
| CVE-2022-3738 | 5.9 | Jan 19 | The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists Affected: 16 through 22 |
| CVE-2019-5177 | 5.5 | Mar 12 | An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14) |
| CVE-2019-5176 | 5.5 | Mar 12 | An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14) |
| CVE-2019-5182 | 5.5 | Mar 11 | An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14) |
| CVE-2023-3379 | 5.3 | Nov 20 | WAGO: Improper Privilege Management in web-based management Affected: before 22; 22; 22; 23; 24 |
| CVE-2022-45139 | 5.3 | Feb 27 | A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver Affected: 16 before 22; 22; 23 |
| CVE-2019-5135 | 5.3 | Mar 11 | An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers Affected: 03.00.39(12); 03.01.07(13) |
Showing 8