PT-2019-17459 · Wago · Wago Pfc 200+1

Publicado 2019-12-18 · Atualizado 2020-02-10 · CVE-2019-5077

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12) WAGO PFC 100 Firmware version 03.00.39(12)

Description A denial-of-service issue exists in the iocheckd service 'I/O-Chec' functionality. It can be triggered by a specially crafted set of packets, causing the device to enter an error state and cease all network communications. This can be done by sending unauthenticated packets.

Recommendations For WAGO PFC 200 Firmware version 03.01.07(13), update to a version that fixes this issue. For WAGO PFC 200 Firmware version 03.00.39(12), update to a version that fixes this issue. For WAGO PFC 100 Firmware version 03.00.39(12), update to a version that fixes this issue.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2019-5077

Produtos afetados

Wago Pfc100

Wago Pfc 200

Referências · 3

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0869 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-5077 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5077 · Aviso do Fabricante