Improper access control

2019-10-1901:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.7%

JSON

Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control. A remote attacker can check for the existence of paths and file names via crafted HTTP requests.

CPENameOperatorVersion
pfc_firmwareeq< 3.0.3512

CPE	Name	Operator	Version
	pfc_firmware	eq	< 3.0.3512

References

cert.vde.com/de-de/advisories/vde-2019-017