PT-2020-11088

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 Firmware version 03.02.0214 Description A command injection issue exists in the iocheckd service 'I/O-Check' function. This is due to the improper handling of a specially crafted XML cache file, which can be used to inject OS...

CVE-2019-5175: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially...

PT-2020-11089

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 Firmware version 03.02.0214 Description A command injection issue exists in the iocheckd service 'I/O-Check' function. This is due to the improper handling of a specially crafted XML cache file, which can be used to inject OS...

PT-2020-11093

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 version 03.02.0214 Description A command injection issue exists in the iocheckd service 'I/O-Check' function. This is due to the parsing of a specially crafted XML cache file, which can be used to inject OS commands. An attacker c...

PT-2020-11092

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 Firmware version 03.02.0214 Description A command injection issue exists in the iocheckd service 'I/O-Check' function. This is due to the improper handling of a specially crafted XML cache file, which can be used to inject OS...

PT-2020-11094

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 Firmware version 03.02.0214 Description A command injection issue exists in the iocheckd service 'I/O-Check' function. This is due to the parsing of a specially crafted XML cache file, which can be used to inject OS commands. An...

CVE-2019-5169: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially...

CVE-2019-5170: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially...

CVE-2019-5168

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.0214. An attacker can send a specially crafted XML cache file At 0x1e8a8 the extracted domainname value from the xml file is used as an argument to...

CVE-2019-5166

An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attack...

WAGO PFC 200 Buffer Overflow Vulnerability (CNVD-2020-16629)

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. A buffer overflow vulnerability exists in the I/O-Check function of the iocheckd service in the WAGO PFC 200. An attacker can exploit this vulnerability to cause a denial of service or possibly execute code with...

PT-2020-11085

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 version 03.02.0214 Description A stack buffer overflow issue exists in the iocheckd service 'I/O-Check' functionality. This can be triggered by a specially crafted XML cache file written to a specific location on the device, causi...

CVE-2019-5166: Out-of-bounds Write

An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attack...

PT-2020-11087

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 version 03.02.0214 Description A command injection issue exists in the iocheckd service, specifically in the 'I/O-Check' function. This is due to the use of user-input data from an XML cache file in a system command. An attacker c...

WAGO PFC200 iocheckd service "I/O-Check" cache Multiple Command Injection Vulnerabilities

Summary An exploitable command injection vulnerability exists in the iocheckd service “I/O-Check” function of the WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to...

PHPCMS 2008 type.php Code Injection (CVE-2018-19127)

A code injection vulnerability exists in PHPCMS 2008. An attacker could write arbitrary content to a website cache file with a controllable filename. Successful exploitation of this vulnerability could lead to arbitrary code execution...

CVE-2019-9829

Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/defaultpc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates...

Design/Logic Flaw

Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/defaultpc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates...

CVE-2019-9829

Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/defaultpc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates...

CVE-2019-9829: Inclusion of Functionality from Untrusted Control Sphere

Maccms 10 allows remote attackers to execute arbitrary PHP code by entering this code in a template/defaultpc/html/art Edit action. This occurs because template rendering uses an include operation on a cache file, which bypasses the prohibition of .php files as templates...