PT-2019-17459

CVE-2019-5077

·

Publicado

2019-12-18

·

Atualizado

2020-02-10

Descrição por

CVSS 3.1
9.1
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12) WAGO PFC 100 Firmware version 03.00.39(12)
Description A denial-of-service issue exists in the iocheckd service 'I/O-Chec' functionality. It can be triggered by a specially crafted set of packets, causing the device to enter an error state and cease all network communications. This can be done by sending unauthenticated packets.
Recommendations For WAGO PFC 200 Firmware version 03.01.07(13), update to a version that fixes this issue. For WAGO PFC 200 Firmware version 03.00.39(12), update to a version that fixes this issue. For WAGO PFC 100 Firmware version 03.00.39(12), update to a version that fixes this issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-306: Missing Authentication for Critical Function
Identificadores relacionados
CVE-2019-5077
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com