EUVD-2018-7358

Malware in sbrugna...

CVE-2025-8638 Kenwood DMX958XR Firmware Update Command Injection Vulnerability

Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

CVE-2019-5156

An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.0214, 03.01.0713, and 03.00.3912. An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command...

WAGO PFC200 OS Command Injection Vulnerability (CNVD-2020-19519)

The WAGO PFC200 is a programmable logic controller PLC from WAGO Germany. The WAGO PFC200 suffers from an operating system command injection vulnerability that can be exploited by an attacker to inject operating system commands into the value of the TimeoutPrepared parameter contained in the...

PT-2020-11078

Name of the Vulnerable Software and Affected Versions WAGO PFC200 versions 03.00.3912 through 03.02.0214 Description An exploitable command injection issue exists in the cloud connectivity feature. This allows an attacker to inject operating system commands into parameter values contained in the...

PT-2020-11079

Name of the Vulnerable Software and Affected Versions WAGO PFC200 versions 03.00.3912 through 03.02.0214 Description An exploitable command injection issue exists in the cloud connectivity functionality. An attacker can inject operating system commands into the TimeoutPrepared parameter value...

CVE-2019-5157: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. An attacker can inject OS commands into the TimeoutUnconfirmed parameter value contained in the Firmware Update command...

Schneider Electric Modicon Quantum FTP Server Privilege Escalation

The vulnerability of the microprogrammed logic controller Schneider Electric Modicon Quantum software is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to execute arbitrary code, cause malfunctions, or upload malicious firmware using a special FTP...