PT-2020-11067 · Wago · Wago E!Cockpit

Published 2020-03-10 · Updated 2020-03-13 · CVE-2019-5107

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WAGO e!Cockpit version 1.5.1.1

Description A cleartext transmission issue exists in the network communication functionality. An attacker with access to network traffic can intercept, interpret, and manipulate data, including passwords, configurations, and binaries being transferred to endpoints.

Recommendations For WAGO e!Cockpit version 1.5.1.1, consider implementing encryption for network communications to prevent data interception and manipulation. As a temporary workaround, restrict access to the network to minimize the risk of exploitation.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2019-5107

Affected Products

Wago E!Cockpit

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-5107 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5107 · Vendor Advisory
• https://t.me/cvenotify/1527 · Telegram Post
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0899 · Note