Wago PFC200 iocheckd service 'I/O-Check' cache Code Execution (CVE-2019-5177)

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service I/O-Check' functionality of WAGO PFC 200 Firmware version 03.02.0214. The destination buffer sp+0x440 is overflowed with the call to sprintf for any domainname values that are greater than...

CVE-2019-5177

CVE-2019-5177 affects the WAGO PFC200 controller’s iocheckd service (I/O-Check) on firmware 03.02.02(14). The vulnerability is a stack buffer overflow in the iocheckd cache parsing when processing XML cache data; the destination buffer sp+0x440 can be overflowed via sprintf() with domainname valu...