CVE-2019-5180: Buffer Overflow

Published Mar 11, 2020

Updated

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any ip values that are greater than 1024-len(‘/etc/config-tools/configinterfaces interface=X1 state=enabled ip-address=‘) in length. A ip value of length 0x3da will cause the service to crash.

Affected Software

2 affected components

WAGO PFC200 Firmware=03.02.02\(14\)

WAGO PFC200

Event History

Mar 11, 2020

CVE Published

via MITRE·11:30 PM

Data Sourced

via MITRE·11:30 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2019-5180.

What is the affected software for this vulnerability?

The affected software for this vulnerability is WAGO PFC 200 Firmware version 03.02.02(14).

How severe is CVE-2019-5180?

CVE-2019-5180 has a severity score of 7.8 (High).

How can an attacker exploit CVE-2019-5180?

An attacker can exploit CVE-2019-5180 by sending a specially crafted packet to trigger the parsing of a cache file, causing a stack buffer overflow.

Is WAGO PFC200 vulnerable to CVE-2019-5180?

Yes, WAGO PFC200 Firmware version 03.02.02(14) is vulnerable to CVE-2019-5180.