Stack Buffer Overflow in WAGO PFC 200 IoT Device by WAGO
CVE-2019-5166

7.8HIGH

Key Information:

Vendor

Wago

Status
Wago Pfc200 Firmware
Vendor
CVE Published:
11 March 2020

What is CVE-2019-5166?

A stack buffer overflow vulnerability in the iocheckd service's 'I/O-Check' function of the WAGO PFC 200 device can be exploited by attackers. By sending specially crafted XML cache files to a specific location, an attacker may cause an overflow, leading to unauthorized code execution. This security flaw highlights the need for rigorous validation of data inputs to prevent unauthorized access and maintain the integrity of the system.

Affected Version(s)

WAGO PFC200 Firmware version 03.02.02(14)

References

https://talosintelligence.com/vulnerability_reports/TALOS...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.