CVE-2019-5081: Buffer Overflow

Published Dec 18, 2019

Updated

An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a heap buffer overflow, potentially resulting in code execution. An attacker can send unauthenticated packets to trigger this vulnerability.

Affected Software

5 affected components

WAGO PFC 200 Firmware=03.00.39\(12\)

WAGO PFC 200 Firmware=03.01.07\(13\)

WAGO PFC 200

WAGO PFC 100 Firmware=03.00.39\(12\)

WAGO PFC 100

Event History

Dec 18, 2019

CVE Published

via MITRE·07:59 PM

Data Sourced

via MITRE·07:59 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2019-5081.

What is the affected software?

The affected software includes WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC 100 Firmware version 03.00.39(12).

What is the severity of CVE-2019-5081?

The severity of CVE-2019-5081 is critical with a score of 9.8.

How can an attacker exploit this vulnerability?

An attacker can exploit this vulnerability by sending a specially crafted set of packets that can cause a heap buffer overflow.

Are there any references for further information about this vulnerability?

Yes, you can find more information about this vulnerability at the following links: [Link 1](https://talosintelligence.com/vulnerability_reports/TALOS-2019-0873), [Link 2](https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0874).