PT-2019-15271 · Wago · Wago Series Pfc200+1

Nico Jansen · Published 2019-10-19 · Updated 2023-03-13 · CVE-2019-18202

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions WAGO Series PFC100 and PFC200 devices versions prior to FW12

Description The issue allows for Information Disclosure due to improper access control. A remote attacker can exploit this by sending crafted HTTP requests to check for the existence of paths and file names.

Recommendations For WAGO Series PFC100 and PFC200 devices versions prior to FW12, update to FW12 or later to resolve the issue. As a temporary workaround, consider restricting access to the devices to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2019-18202

Affected Products

Wago Series Pfc100

Wago Series Pfc200

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-18202 · Security Note
• https://osv.dev/vulnerability/CVE-2019-18202 · Vendor Advisory
• https://cert.vde.com/de-de/advisories/vde-2019-017 · Note