CVSS: 5.3EPSS: 0%CPEs: 20EXPL: 0CVE-2023-3379 – WAGO: Improper Privilege Management in web-based management
https://notcve.org/view.php?id=CVE-2023-3379
20 Nov 2023 — Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges. La administración de múltiples productos basada en web de Wago tiene una vulnerabilidad que permite a un atacante autenticado local cambiar las contraseñas de otros usuarios que no sean administradores y así escalar privilegios no root. • https://cert.vde.com/en/advisories/VDE-2023-015 • CWE-269: Improper Privilege Management CWE-863: Incorrect Authorization •
CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 1CVE-2019-5134
https://notcve.org/view.php?id=CVE-2019-5134
10 Mar 2020 — An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and 03.01.07(13), and WAGO PFC100 version 03.00.39(12). A specially crafted authentication request can bypass regular expression filters, resulting in sensitive information disclosure. Existe una vulnerabilidad expresión regular explotable sin anclaje en la funcionalidad de autenticación de Web-Based Management (WBM) de WAGO PFC200 version... • https://talosintelligence.com/vulnerability_reports/TALOS-2019-0923 •
CVSS: 9.1EPSS: 4%CPEs: 4EXPL: 1CVE-2019-5161
https://notcve.org/view.php?id=CVE-2019-5161
10 Mar 2020 — An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted XML file will direct the Cloud Connectivity service to download and execute a shell script with root privileges. Existe una vulnerabilidad de ejecución de código remota explotable en la funcionalidad Cloud Connectivity de WAGO PFC200 versiones 03.02.02(14), 03.01.07(13) y 03.00.39(12). Un archivo XML especialmente diseñado... • https://talosintelligence.com/vulnerability_reports/TALOS-2019-0954 • CWE-345: Insufficient Verification of Data Authenticity •
CVSS: 7.2EPSS: 2%CPEs: 4EXPL: 1CVE-2019-5156
https://notcve.org/view.php?id=CVE-2019-5156
10 Mar 2020 — An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command. Existe una vulnerabilidad de inyección de comando explotable en la funcionalidad cloud connectivity de WAGO PFC200 versiones 03.02.02(14), 03.01.07(13) y 03.00.39(12). Un atacante puede inyectar comandos de sistema o... • https://talosintelligence.com/vulnerability_reports/TALOS-2019-0949 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 7.2EPSS: 2%CPEs: 4EXPL: 1CVE-2019-5157
https://notcve.org/view.php?id=CVE-2019-5157
10 Mar 2020 — An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject OS commands into the TimeoutUnconfirmed parameter value contained in the Firmware Update command. Existe una vulnerabilidad de inyección de comandos explotable en la funcionalidad Cloud Connectivity en WAGO PFC200 en las versiones de firmware 03.02.02(14), 03.01.07(13) y 03.00.39(12). Un atacante puede inyectar com... • https://talosintelligence.com/vulnerability_reports/TALOS-2019-0950 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.1EPSS: 2%CPEs: 4EXPL: 1CVE-2019-5160
https://notcve.org/view.php?id=CVE-2019-5160
10 Mar 2020 — An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted HTTPS POST request can cause the software to connect to an unauthorized host, resulting in unauthorized access to firmware update functionality. An attacker can send an authenticated HTTPS POST request to direct the Cloud Connectivity software to connect to an attacker controlled Azure IoT Hub node. Existe una ... • https://talosintelligence.com/vulnerability_reports/TALOS-2019-0953 •
CVSS: 5.3EPSS: 0%CPEs: 5EXPL: 1CVE-2019-5135
https://notcve.org/view.php?id=CVE-2019-5135
10 Mar 2020 — An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt() function which can be exploited to disclose hashed user credentials. This affects WAGO PFC200 Firmware version 03.00.39(12) and version 03.01.07(13), and WAGO PFC100 Firmware version 03.00.39(12). Existe una vulnerabilidad de discrepancia de sincronización explotable en la funcionalidad de... • https://talosintelligence.com/vulnerability_reports/TALOS-2019-0924 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •
CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 1CVE-2019-5149
https://notcve.org/view.php?id=CVE-2019-5149
10 Mar 2020 — The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web server and makes use of the FastCGI module, which is intended to provide high performance for all Internet applications without the penalties of Web server APIs. However, the default configuration of this module appears to limit the number of concurrent php-cgi processes to two, which can be abused to cause a denial of service of the entire web server. This affects WAGO PF... • https://talosintelligence.com/vulnerability_reports/TALOS-2019-0939 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 9.0EPSS: 2%CPEs: 4EXPL: 1CVE-2019-5155
https://notcve.org/view.php?id=CVE-2019-5155
10 Mar 2020 — An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in the firmware update command. This affects WAGO PFC200 Firmware version 03.02.02(14), version 03.01.07(13), and version 03.00.39(12) Existe una vulnerabilidad de inyección de comando explotable en la funcionalidad cloud connectivity de WAGO PFC200. Un atacante puede inyectar comandos de sistema operativo en cualq... • https://talosintelligence.com/vulnerability_reports/TALOS-2019-0948 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 1%CPEs: 5EXPL: 1CVE-2019-5082
https://notcve.org/view.php?id=CVE-2019-5082
08 Jan 2020 — An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version 03.00.39(12), and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a heap buffer overflow, potentially resulting in code execution. An attacker can send unauthenticated packets to trigger this vulnerability. Existe una vulnerabilidad de desbordamiento del búfer de la pila explotable en la fun... • https://talosintelligence.com/vulnerability_reports/TALOS-2019-0874 • CWE-787: Out-of-bounds Write •