CVE-2019-5174: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted...

CVE-2019-5175: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially...

CVE-2019-5173: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially...

PT-2020-11088

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 Firmware version 03.02.0214 Description A command injection issue exists in the iocheckd service 'I/O-Check' function. This is due to the improper handling of a specially crafted XML cache file, which can be used to inject OS...

PT-2020-11089

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 Firmware version 03.02.0214 Description A command injection issue exists in the iocheckd service 'I/O-Check' function. This is due to the improper handling of a specially crafted XML cache file, which can be used to inject OS...

CVE-2019-5170: Improper Neutralization of Special Elements used in an OS Command

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially...

PT-2020-11094

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 Firmware version 03.02.0214 Description A command injection issue exists in the iocheckd service 'I/O-Check' function. This is due to the parsing of a specially crafted XML cache file, which can be used to inject OS commands. An...

CVE-2019-5168

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.0214. An attacker can send a specially crafted XML cache file At 0x1e8a8 the extracted domainname value from the xml file is used as an argument to...

CVE-2019-5166

An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attack...

PT-2020-11087

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 version 03.02.0214 Description A command injection issue exists in the iocheckd service, specifically in the 'I/O-Check' function. This is due to the use of user-input data from an XML cache file in a system command. An attacker c...

PT-2020-11085

Name of the Vulnerable Software and Affected Versions WAGO PFC 200 version 03.02.0214 Description A stack buffer overflow issue exists in the iocheckd service 'I/O-Check' functionality. This can be triggered by a specially crafted XML cache file written to a specific location on the device, causi...

WAGO PFC 200 Buffer Overflow Vulnerability (CNVD-2020-16628)

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. A buffer overflow vulnerability exists in the I/O-Check function of the iocheckd service in the WAGO PFC 200. An attacker can exploit this vulnerability to cause a denial of service or possibly execute code with...

CVE-2019-5166: Out-of-bounds Write

An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attack...

WAGO PFC200 iocheckd service "I/O-Check" cache Multiple Command Injection Vulnerabilities

Summary An exploitable command injection vulnerability exists in the iocheckd service “I/O-Check” function of the WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to...

WAGO PFC200 iocheckd service "I/O-Check" cache Multiple Code Execution Vulnerabilities

Summary An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service “I/O-Check” functionality of WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An...

WAGO PFC200 iocheckd service "I/O-Check" cache DNS code execution vulnerability

Summary An exploitable stack buffer overflow vulnerability exists in the iocheckd service “I/O-Check” functionality of WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send...