CVE-2019-5169: Command Injection

Published Mar 11, 2020

Updated

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1e900 the extracted gateway value from the xml file is used as an argument to /etc/config-tools/configdefaultgateway number=0 state=enabled value=<contents of gateway node> using sprintf(). This command is later executed via a call to system().

Affected Software

2 affected components

WAGO PFC200 Firmware=03.02.02\(14\)

WAGO PFC200

Event History

Mar 11, 2020

CVE Published

via MITRE·11:17 PM

Data Sourced

via MITRE·11:17 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this command injection vulnerability?

The vulnerability ID for this command injection vulnerability is CVE-2019-5169.

What is the affected software for this vulnerability?

The affected software for this vulnerability is WAGO PFC 200 Firmware version 03.02.02(14).

What is the severity rating of CVE-2019-5169?

CVE-2019-5169 has a severity rating of 7.8 (high).

How can this command injection vulnerability be exploited?

This command injection vulnerability can be exploited by writing a specially crafted XML cache file to a specific location on the device to inject OS commands.

Is there a fix available for CVE-2019-5169?

There is no information provided about a fix available for CVE-2019-5169 at the moment.