PT-2019-17459

CVE-2019-5077

·

Published

2019-12-18

·

Updated

2020-02-10

Description by

CVSS 3.1
9.1
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12) WAGO PFC 100 Firmware version 03.00.39(12)
Description A denial-of-service issue exists in the iocheckd service 'I/O-Chec' functionality. It can be triggered by a specially crafted set of packets, causing the device to enter an error state and cease all network communications. This can be done by sending unauthenticated packets.
Recommendations For WAGO PFC 200 Firmware version 03.01.07(13), update to a version that fixes this issue. For WAGO PFC 200 Firmware version 03.00.39(12), update to a version that fixes this issue. For WAGO PFC 100 Firmware version 03.00.39(12), update to a version that fixes this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-306: Missing Authentication for Critical Function
Related identifiers
CVE-2019-5077
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com