Login Request a demo
PF
Product
Pfc200 Firmware
by Wago · last CVE Nov 20, 2023
40
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities40In the news0Timeline
Severity mix
Critical 8High 23Medium 8Low 1
Severity
All severities40Critical8High23Medium8Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Pfc200 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-1698
9.8
82%
May 15
In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended…
Affected: 20 through 23
CVE-2022-45140
9.8
1%
Feb 27
The configuration backend allows an unauthenticated user to write arbitrary data with root privileges to the storage, which could lead to unauthenticated remote code execution and…
Affected: 16 before 22; 22; 23
CVE-2022-45138
9.8
1%
Feb 27
The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API
Affected: 16 before 22; 22; 23
CVE-2019-5082
9.8
3%
Jan 8
An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version…
Affected: 03.00.39(12); 03.01.07(13)
CVE-2018-5459
9.8
3%
Feb 13
An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X
Affected: before 02.07.07\(10\)
CVE-2019-5161
9.1
3%
Mar 11
An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12)
Affected: 03.00.39(12); 03.01.07(13); 03.02.02(14)
CVE-2019-5160
9.1
3%
Mar 11
An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12)
Affected: 03.00.39(12); 03.01.07(13); 03.02.02(14)
CVE-2016-9362
9.1
2%
Feb 13
An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 (released August 2015), WAGO 750-881 prior to FW09 (released August 2016), and WAGO 0758-0874-0000-0111
Affected: All versions, or not specified
CVE-2019-5184
7.8
1%
Mar 23
An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200
Affected: 03.02.02(14)
CVE-2019-5181
7.8
1%
Mar 12
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5180
7.8
1%
Mar 12
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5179
7.8
1%
Mar 12
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5178
7.8
1%
Mar 12
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5171
7.8
1%
Mar 12
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5170
7.8
1%
Mar 12
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5169
7.8
1%
Mar 12
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5175
7.8
1%
Mar 11
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5174
7.8
1%
Mar 11
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5173
7.8
1%
Mar 11
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5172
7.8
1%
Mar 11
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5168
7.8
1%
Mar 11
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5167
7.8
1%
Mar 11
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5166
7.8
1%
Mar 11
An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5149
7.5
2%
Mar 11
The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web server and makes use of the FastCGI…
Affected: 03.00.39(12); 03.01.07(13)
CVE-2019-5134
7.5
2%
Mar 11
An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and…
Affected: 03.00.39(12); 03.01.07(13)
CVE-2020-6090
7.2
2%
Jun 11
An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15)
Affected: 03.03.10(15)
CVE-2019-5157
7.2
4%
Mar 11
An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12)
Affected: 03.00.39(12); 03.01.07(13); 03.02.02(14)
CVE-2019-5156
7.2
4%
Mar 11
An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12)
Affected: 03.00.39(12); 03.01.07(13); 03.02.02(14)
CVE-2019-5155
7.2
5%
Mar 11
An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200
Affected: 03.00.39(12); 03.01.07(13); 03.02.02(14)
CVE-2019-5186
7.0
1%
Mar 23
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200
Affected: 03.02.02(14)
CVE-2019-5185
7.0
1%
Mar 23
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200
Affected: 03.02.02(14)
CVE-2022-45137
6.1
0%
Feb 27
The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser
Affected: 16 before 22; 22; 23
CVE-2022-3738
5.9
1%
Jan 19
The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists
Affected: 16 through 22
CVE-2019-5177
5.5
0%
Mar 12
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5176
5.5
1%
Mar 12
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2019-5182
5.5
1%
Mar 11
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14)
Affected: 03.02.02(14)
CVE-2023-3379
5.3
0%
Nov 20
Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to…
Affected: before 22; 22; 22; 23; 24
CVE-2022-45139
5.3
0%
Feb 27
A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver
Affected: 16 before 22; 22; 23
CVE-2019-5135
5.3
1%
Mar 11
An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers
Affected: 03.00.39(12); 03.01.07(13)
CVE-2023-4089
2.7
1%
Oct 17
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion
Affected: 16 through 26
Showing 40