pfc200_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/pfc200_firmware/ Sun, 26 Feb 2023 06:42:35 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png pfc200_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/pfc200_firmware/ 32 32 CVE-2020-6090 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6090/ Sun, 26 Feb 2023 06:42:35 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6090/ An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15). A specially crafted series of HTTP requests can cause code execution resulting in remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

The post CVE-2020-6090 appeared first on CVE Vulnerability.

]]> An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15). A specially crafted series of HTTP requests can cause code execution resulting in remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

The post CVE-2020-6090 appeared first on CVE Vulnerability.

]]> CVE-2019-5172 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5172/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5172/ An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1e840 the extracted ntp value from the xml file is used as an argument to /etc/config-tools/config_sntp time-server-%d= using […]

The post CVE-2019-5172 appeared first on CVE Vulnerability.

]]> An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1e840 the extracted ntp value from the xml file is used as an argument to /etc/config-tools/config_sntp time-server-%d= using sprintf(). This command is later executed via a call to system(). This is done in a loop and there is no limit to how many ntp entries will be parsed from the xml file.

The post CVE-2019-5172 appeared first on CVE Vulnerability.

]]> CVE-2019-5186 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5186/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5186/ An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service “I/O-Check” functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1eb9c the extracted interface element name from the xml file is used as an argument to /etc/config-tools/config_interfaces interface= using sprintf(). The […]

The post CVE-2019-5186 appeared first on CVE Vulnerability.

]]> An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service “I/O-Check” functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1eb9c the extracted interface element name from the xml file is used as an argument to /etc/config-tools/config_interfaces interface= using sprintf(). The destination buffer sp+0x40 is overflowed with the call to sprintf() for any interface values that are greater than 512-len(“/etc/config-tools/config_interfaces interface=”) in length. Later, at 0x1ea08 strcpy() is used to copy the contents of the stack buffer that was overflowed sp+0x40 into sp+0x440. The buffer sp+0x440 is immediately adjacent to sp+0x40 on the stack. Therefore, there is no NULL termination on the buffer sp+0x40 since it overflowed into sp+0x440. The strcpy() will result in invalid memory access. An interface value of length 0x3c4 will cause the service to crash.

The post CVE-2019-5186 appeared first on CVE Vulnerability.

]]> CVE-2019-5185 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5185/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5185/ An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service “I/O-Check” functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1ea28 the extracted state value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state= using sprintf(). […]

The post CVE-2019-5185 appeared first on CVE Vulnerability.

]]> An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service “I/O-Check” functionality of WAGO PFC 200. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1ea28 the extracted state value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state= using sprintf(). The destination buffer sp+0x40 is overflowed with the call to sprintf() for any state values that are greater than 512-len(“/etc/config-tools/config_interfaces interface=X1 state=”) in length. Later, at 0x1ea08 strcpy() is used to copy the contents of the stack buffer that was overflowed sp+0x40 into sp+0x440. The buffer sp+0x440 is immediately adjacent to sp+0x40 on the stack. Therefore, there is no NULL termination on the buffer sp+0x40 since it overflowed into sp+0x440. The strcpy() will result in invalid memory access. An state value of length 0x3c9 will cause the service to crash.

The post CVE-2019-5185 appeared first on CVE Vulnerability.

]]> CVE-2019-5184 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5184/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5184/ An exploitable double free vulnerability exists in the iocheckd service “I/O-Check” functionality of WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can cause a heap pointer to be freed twice, resulting in a denial of service and potentially code execution. An attacker can send a specially […]

The post CVE-2019-5184 appeared first on CVE Vulnerability.

]]> An exploitable double free vulnerability exists in the iocheckd service “I/O-Check” functionality of WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can cause a heap pointer to be freed twice, resulting in a denial of service and potentially code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file.

The post CVE-2019-5184 appeared first on CVE Vulnerability.

]]> CVE-2019-5182 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5182/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5182/ An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x440 is overflowed with the call to sprintf() for any type values that are greater than […]

The post CVE-2019-5182 appeared first on CVE Vulnerability.

]]> An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x440 is overflowed with the call to sprintf() for any type values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled config-type=‘) in length. A type value of length 0x3d9 will cause the service to crash.

The post CVE-2019-5182 appeared first on CVE Vulnerability.

]]> CVE-2019-5181 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5181/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5181/ An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger […]

The post CVE-2019-5181 appeared first on CVE Vulnerability.

]]> An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any subnetmask values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled subnet-mask=‘) in length. A subnetmask value of length 0x3d9 will cause the service to crash.

The post CVE-2019-5181 appeared first on CVE Vulnerability.

]]> CVE-2019-5180 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5180/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5180/ An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any ip values that are greater […]

The post CVE-2019-5180 appeared first on CVE Vulnerability.

]]> An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any ip values that are greater than 1024-len(‘/etc/config-tools/config_interfaces interface=X1 state=enabled ip-address=‘) in length. A ip value of length 0x3da will cause the service to crash.

The post CVE-2019-5180 appeared first on CVE Vulnerability.

]]> CVE-2019-5179 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5179/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5179/ An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.

The post CVE-2019-5179 appeared first on CVE Vulnerability.

]]> An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file.

The post CVE-2019-5179 appeared first on CVE Vulnerability.

]]> CVE-2019-5178 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5178/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5178/ An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any hostname values that are greater […]

The post CVE-2019-5178 appeared first on CVE Vulnerability.

]]> An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send a specially crafted packet to trigger the parsing of this cache file. The destination buffer sp+0x440 is overflowed with the call to sprintf() for any hostname values that are greater than 1024-len(‘/etc/config-tools/change_hostname hostname=‘) in length. A hostname value of length 0x3fd will cause the service to crash.

The post CVE-2019-5178 appeared first on CVE Vulnerability.

]]>