Lucene search

K
cvelistTalosCVELIST:CVE-2019-5166
HistoryMar 10, 2020 - 10:25 p.m.

CVE-2019-5166

2020-03-1022:25:42
talos
www.cve.org
3

EPSS

0.001

Percentile

22.7%

An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file.

CNA Affected

[
  {
    "product": "WAGO PFC200 Firmware",
    "vendor": "Wago",
    "versions": [
      {
        "status": "affected",
        "version": "version 03.02.02(14)"
      }
    ]
  }
]

EPSS

0.001

Percentile

22.7%

Related for CVELIST:CVE-2019-5166