1312 matches found
Stack overflow
An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attack...
CVE-2019-5174
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted...
CVE-2019-5174
Summary: CVE-2019-5174 affects the WAGO PFC200 controller (firmware 03.02.02(14)) via multiple command-injection paths in the iocheckd “I/O-Check” cache parser. The vulnerability stems from parsing a file-backed XML cache (e.g., /tmp/iocheckCache.xml) and using unsafely constructed strings with s...
CVE-2019-5175
WAGO PFC200 iocheckd vulnerability (CVE-2019-5175) affects the iocheckd (I/O-Check) service. The issue arises from parsing a crafted XML cache file stored at /tmp/iocheckCache.xml, where user-controlled values are fed into /etc/config-tools commands via sprintf() and later executed with system(),...
CVE-2019-5175
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially...
CVE-2019-5172
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.0214. An attacker can send a specially crafted packet to trigger the parsing of this cache file. At 0x1e840 the extracted ntp value from the xml file is us...
CVE-2019-5172
Summary: CVE-2019-5172 affects the WAGO PFC200, firmware 03.02.02(14). The iocheckd service reads a cache XML (iocheckCache.xml) from a writable location (e.g., /tmp) and, during parsing, uses values by string formatting to build OS commands which are then executed via system(). This enables mult...
CVE-2019-5173
CVE-2019-5173 affects WAGO PFC200 with the iocheckd service “I/O-Check”. A specially crafted XML cache file parsed by iocheckd (cache at /tmp/iocheckCache.xml) can inject OS commands, which are constructed via sprintf() from XML node contents and executed through system(). The TALOS report detail...
CVE-2019-5173
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially...
CVE-2019-5182
An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.0214. An attacker can send a specially crafted packet to trigger the parsing of this cache file.The destination buffer sp+0x440 is...
CVE-2019-5182
Affected software: WAGO PFC200 with iocheckd service “I/O-Check”. Vulnerability: stack-based buffer overflow in parsing the XML cache file used by iocheckCache.xml, triggered by crafted cache content (e.g., settings affecting hostname/name, etc.). Root cause: overlong input copied into a 1024-byt...
CVE-2019-5168
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.0214. An attacker can send a specially crafted XML cache file At 0x1e8a8 the extracted domainname value from the xml file is used as an argument to...
CVE-2019-5168
The CVE-2019-5168 issue affects WAGO PFC200 controllers (iocheckd “I/O-Check”) where parsing of iocheckCache.xml can inject OS commands. Specifically, the vulnerability arises when values from XML nodes (e.g., domain-name, dns, hostname, ip, gateway, etc.) are fed into sprintf() to build commands...
CVE-2019-5167
An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.0214. At 0x1e3f0 the extracted dns value from the xml file is used as an argument to /etc/config-tools/editdnsserver %s dns-server-nr=%d dns-server-name= using...
CVE-2019-5167
CVE-2019-5167 affects WAGO PFC200 controllers with the iocheckd service “I/O-Check.” The TALOS report details a command-injection path in the iocheckd cache parsing: a DNS/XML cache entry is read, assembled via sprintf into a command such as /etc/config-tools/edit_dns_server …, and then executed ...
CVE-2019-5166
CVE-2019-5166 affects the WAGO PFC200 controller, specifically the iocheckd service’s IC/“I/O-Check” functionality. A stack-based buffer overflow occurs while parsing a DNS value embedded in the cached XML file /tmp/iocheckCache.xml, exploitable via a crafted DNS parameter during a BC_SaveParamet...
CVE-2019-5166
An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attack...
WAGO PFC 200 Buffer Overflow Vulnerability (CNVD-2020-16629)
The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. A buffer overflow vulnerability exists in the I/O-Check function of the iocheckd service in the WAGO PFC 200. An attacker can exploit this vulnerability to cause a denial of service or possibly execute code with...
WAGO PFC 200 Buffer Overflow Vulnerability (CNVD-2020-16628)
The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. A buffer overflow vulnerability exists in the I/O-Check function of the iocheckd service in the WAGO PFC 200. An attacker can exploit this vulnerability to cause a denial of service or possibly execute code with...
