CVE-2019-5080: Critical severity wago pfc200 vulnerability

Published Dec 18, 2019

Updated

An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A single packet can cause a denial of service and weaken credentials resulting in the default documented credentials being applied to the device. An attacker can send an unauthenticated packet to trigger this vulnerability.

Affected Software

5 affected components

WAGO PFC 200 Firmware=03.00.39\(12\)

WAGO PFC 200 Firmware=03.01.07\(13\)

WAGO PFC 200

WAGO PFC 100 Firmware=03.00.39\(12\)

WAGO PFC 100

Event History

Dec 18, 2019

CVE Published

via MITRE·08:35 PM

Data Sourced

via MITRE·08:35 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-5080?

CVE-2019-5080 is a denial-of-service vulnerability in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12).

What is the severity of CVE-2019-5080?

The severity of CVE-2019-5080 is critical with a CVSS score of 9.1.

How does CVE-2019-5080 affect WAGO PFC 200 Firmware?

CVE-2019-5080 affects WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12).

How does CVE-2019-5080 affect WAGO PFC100 Firmware?

CVE-2019-5080 affects WAGO PFC100 Firmware version 03.00.39(12).

How can I fix CVE-2019-5080?

To fix CVE-2019-5080, users should update their WAGO PFC 200 Firmware to a version that is not vulnerable.