CVE-2019-5156

CVE-2019-5156 affects WAGO PFC200 controllers (firmware v03.02.02(14), v03.01.07(13), v03.00.39(12)) in the Cloud Connectivity service. The vulnerability stems from passing a user-supplied value from the Firmware Update command’s TimeoutPrepared parameter into a shell command via “settimeout -c …...