Pfc200 Firmware vulnerabilities | LiveThreat CVE Feed

Product

Pfc200 Firmware

by Wago · last CVE Nov 20, 2023

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities40 In the news0 Timeline

Severity mix

Critical 8High 23Medium 8Low 1

Severity

All severities40 Critical8 High23 Medium8 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Pfc200 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-5184	7.8	1%	Mar 23	An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Affected: 03.02.02(14)
CVE-2019-5181	7.8	1%	Mar 12	An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5180	7.8	1%	Mar 12	An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5179	7.8	1%	Mar 12	An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5178	7.8	1%	Mar 12	An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5171	7.8	1%	Mar 12	An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5170	7.8	1%	Mar 12	An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5169	7.8	1%	Mar 12	An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5175	7.8	1%	Mar 11	An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5174	7.8	1%	Mar 11	An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5173	7.8	1%	Mar 11	An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5172	7.8	1%	Mar 11	An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5168	7.8	1%	Mar 11	An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5167	7.8	1%	Mar 11	An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5166	7.8	1%	Mar 11	An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14) Affected: 03.02.02(14)
CVE-2019-5149	7.5	2%	Mar 11	The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web server and makes use of the FastCGI… Affected: 03.00.39(12); 03.01.07(13)
CVE-2019-5134	7.5	2%	Mar 11	An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and… Affected: 03.00.39(12); 03.01.07(13)
CVE-2020-6090	7.2	2%	Jun 11	An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15) Affected: 03.03.10(15)
CVE-2019-5157	7.2	4%	Mar 11	An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12) Affected: 03.00.39(12); 03.01.07(13); 03.02.02(14)
CVE-2019-5156	7.2	4%	Mar 11	An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12) Affected: 03.00.39(12); 03.01.07(13); 03.02.02(14)
CVE-2019-5155	7.2	5%	Mar 11	An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200 Affected: 03.00.39(12); 03.01.07(13); 03.02.02(14)
CVE-2019-5186	7.0	1%	Mar 23	An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Affected: 03.02.02(14)
CVE-2019-5185	7.0	1%	Mar 23	An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Affected: 03.02.02(14)