CVE-2019-5081

CVE-2019-5081 affects WAGO PFC200/PFC100 iocheckd ("I/O-Check"). The vulnerability is a heap buffer overflow in the iocheckd service when processing input, caused by a lack of input validation, enabling an unauthenticated remote attacker to potentially execute arbitrary code. Affected firmware: P...

CVE-2020-12522

CVE-2020-12522 affects WAGO PFC100/200 controllers and Wago Touch Panel 600 (Standard/Advanced/Marine) with firmware versions

CVE-2019-5073

CVE-2019-5073 describes an information exposure in WAGO iocheckd (I/O-Check) on PFC200/PFC100 controllers. A crafted, unauthenticated packet can trigger the iocheckd tool to fail and copy uninitialized stack data into the response buffer, revealing stack contents to an external recipient. TALOS r...

CVE-2019-5077

CVE-2019-5077 affects WAGO PFC200/PFC100 iocheckd (IOC-Check) Missing Authentication for Critical Function. A specially crafted unauthenticated packet can trigger a denial-of-service, causing the device to enter an error state and cease all network communications. Affected firmware: PFC200 03.01....

CVE-2019-5075

WAGO PFC200/PFC100 devices are affected by CVE-2019-5075 due to a stack buffer overflow in the iocheckd service’s get_coupler_details/getcouplerdetails utility. The root cause is an incorrect buffer length when copying data (MARKING/WAGONR fields) into a stack buffer, enabling remote code executi...

CVE-2019-5078

CVE-2019-5078 affects WAGO PFC200/PFC100 controllers and their iocheckd 'I/O-Check' service. A specially crafted, unauthenticated packet sequence can trigger a denial-of-service, causing the device to enter an error state and cease all network communications. Talos advisories and Red Hat/CISA ref...

CVE-2019-5080

CVE-2019-5080 affects WAGO I/O-CHECK (iocheckd) on PFC200/PFC100 devices. A single unauthenticated UDP-like packet can trigger a denial-of-service and trigger factory-default credentials, interrupting services (e.g., CODESYS runtime) and potentially breaking network access. Affected firmware rang...

CVE-2019-5079

CVE-2019-5079 describes a heap buffer overflow in WAGO iocheckd (I/O-Check) on PFC200/PFC100 controllers. A specially crafted, unauthenticated packet sequence can overflow a heap buffer, potentially leading to arbitrary code execution. Affected firmware versions include PFC200 03.01.07(13) and 03...

CVE-2019-5074

The CVE-2019-5074 vulnerability affects WAGO PFC200/PFC100 iocheckd "I/O-Check" service. Root cause: iocheckd copies QS-STRING into a small stack buffer due to incorrect length handling, enabling a stack overflow that can lead to remote code execution via unauthenticated packets. Affected firmwar...