CVE-2018-5459
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455.
Se ha descubierto un problema de autenticación indebida en WAGO PFC200 Series 3S CoDeSys Runtime, versiones 2.3.X y 2.4.X. Un atacante puede ejecutar diferentes operaciones remotas sin autenticación gracias a la aplicación CoDeSys Runtime, que está disponible en red por defecto en el puerto 2455. Un atacante podría ejecutar algunos comandos sin autenticación, como la lectura, escritura o eliminación de archivos arbitrarios, así como manipular la aplicación PLC durante el tiempo de ejecución mediante el envío de paquetes TCP especialmente manipulados al puerto 2455.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2018-01-12 CVE Reserved
- 2018-02-13 CVE Published
- 2023-07-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-287: Improper Authentication
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-18-044-01 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8202 Search vendor "Wago" for product "750-8202" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8202\/025-000 Search vendor "Wago" for product "750-8202\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8202\/025-001 Search vendor "Wago" for product "750-8202\/025-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8202\/025-002 Search vendor "Wago" for product "750-8202\/025-002" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8202\/040-001 Search vendor "Wago" for product "750-8202\/040-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8203 Search vendor "Wago" for product "750-8203" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8203\/025-000 Search vendor "Wago" for product "750-8203\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8204 Search vendor "Wago" for product "750-8204" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8204\/025-000 Search vendor "Wago" for product "750-8204\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8206 Search vendor "Wago" for product "750-8206" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8206\/025-000 Search vendor "Wago" for product "750-8206\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8206\/025-001 Search vendor "Wago" for product "750-8206\/025-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8207 Search vendor "Wago" for product "750-8207" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8207\/025-000 Search vendor "Wago" for product "750-8207\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8207\/025-001 Search vendor "Wago" for product "750-8207\/025-001" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8208 Search vendor "Wago" for product "750-8208" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | 750-8208\/025-000 Search vendor "Wago" for product "750-8208\/025-000" | - | - |
Safe
|
| Wago Search vendor "Wago" | Pfc200 Firmware Search vendor "Wago" for product "Pfc200 Firmware" | < 02.07.07\(10\) Search vendor "Wago" for product "Pfc200 Firmware" and version " < 02.07.07\(10\)" | - |
Affected
| in | Wago Search vendor "Wago" | Pfc200 Search vendor "Wago" for product "Pfc200" | - | - |
Safe
|