wago Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/wago/ Sun, 26 Feb 2023 06:51:37 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png wago Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/wago/ 32 32 CVE-2018-8836 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8836/ Sun, 26 Feb 2023 06:51:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8836/ Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may […]

The post CVE-2018-8836 appeared first on CVE Vulnerability.

]]> Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port 2455/TCP/IP, used in Codesys management software, which may result in a denial-of-service condition of communications with commissioning and service tools.

The post CVE-2018-8836 appeared first on CVE Vulnerability.

]]> CVE-2020-8597 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8597/ Sun, 26 Feb 2023 06:43:27 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8597/ eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

The post CVE-2020-8597 appeared first on CVE Vulnerability.

]]> eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.

The post CVE-2020-8597 appeared first on CVE Vulnerability.

]]> CVE-2020-6090 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6090/ Sun, 26 Feb 2023 06:42:35 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6090/ An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15). A specially crafted series of HTTP requests can cause code execution resulting in remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

The post CVE-2020-6090 appeared first on CVE Vulnerability.

]]> An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15). A specially crafted series of HTTP requests can cause code execution resulting in remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

The post CVE-2020-6090 appeared first on CVE Vulnerability.

]]> CVE-2020-12522 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12522/ Sun, 26 Feb 2023 06:36:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12522/ The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) with […]

The post CVE-2020-12522 appeared first on CVE Vulnerability.

]]> The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) with firmware versions <=FW10.

The post CVE-2020-12522 appeared first on CVE Vulnerability.

]]> CVE-2020-12516 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12516/ Sun, 26 Feb 2023 06:36:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12516/ Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.

The post CVE-2020-12516 appeared first on CVE Vulnerability.

]]> Older firmware versions (FW1 up to FW10) of the WAGO PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack.

The post CVE-2020-12516 appeared first on CVE Vulnerability.

]]> CVE-2020-12505 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-12505/ Sun, 26 Feb 2023 06:36:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-12505/ Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.

The post CVE-2020-12505 appeared first on CVE Vulnerability.

]]> Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAGO 750-880/xxx-xxx, WAGO 750-881, WAGO 750-831/xxx-xxx, WAGO 750-882, WAGO 750-885/xxx-xxx, WAGO 750-889 in versions FW07 and below.

The post CVE-2020-12505 appeared first on CVE Vulnerability.

]]> CVE-2019-5167 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5167/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5167/ An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). At 0x1e3f0 the extracted dns value from the xml file is used as an argument to /etc/config-tools/edit_dns_server %s dns-server-nr=%d dns-server-name= using sprintf(). This command is later executed via a call to system(). This is done in […]

The post CVE-2019-5167 appeared first on CVE Vulnerability.

]]> An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). At 0x1e3f0 the extracted dns value from the xml file is used as an argument to /etc/config-tools/edit_dns_server %s dns-server-nr=%d dns-server-name= using sprintf(). This command is later executed via a call to system(). This is done in a loop and there is no limit to how many dns entries will be parsed from the xml file.

The post CVE-2019-5167 appeared first on CVE Vulnerability.

]]> CVE-2019-5166 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5166/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5166/ An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger the parsing […]

The post CVE-2019-5166 appeared first on CVE Vulnerability.

]]> An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file.

The post CVE-2019-5166 appeared first on CVE Vulnerability.

]]> CVE-2019-5168 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5168/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5168/ An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). An attacker can send a specially crafted XML cache file At 0x1e8a8 the extracted domainname value from the xml file is used as an argument to /etc/config-tools/edit_dns_server domain-name= using sprintf().This command is later executed via a […]

The post CVE-2019-5168 appeared first on CVE Vulnerability.

]]> An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). An attacker can send a specially crafted XML cache file At 0x1e8a8 the extracted domainname value from the xml file is used as an argument to /etc/config-tools/edit_dns_server domain-name= using sprintf().This command is later executed via a call to system().

The post CVE-2019-5168 appeared first on CVE Vulnerability.

]]> CVE-2019-5169 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5169/ Sun, 26 Feb 2023 06:33:34 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5169/ An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this […]

The post CVE-2019-5169 appeared first on CVE Vulnerability.

]]> An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1e900 the extracted gateway value from the xml file is used as an argument to /etc/config-tools/config_default_gateway number=0 state=enabled value= using sprintf(). This command is later executed via a call to system().

The post CVE-2019-5169 appeared first on CVE Vulnerability.

]]>