Lucene search

MitreCVELIST:CVE-2019-18202

HistoryOct 19, 2019 - 12:02 a.m.

CVE-2019-18202

2019-10-1900:02:03

mitre

www.cve.org

5.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.7%

JSON

Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control. A remote attacker can check for the existence of paths and file names via crafted HTTP requests.

References

cert.vde.com/de-de/advisories/vde-2019-017

5.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.7%

JSON

Related for CVELIST:CVE-2019-18202