Skip to content
Sign in
Not rated

CVE-2019-5175 An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200…

Description

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted packet to trigger the parsing of this cache file.At 0x1ea28 the extracted type value from the xml file is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=enabled config-type=<contents of type node> using sprintf(). This command is later executed via a call to system().

Affected products and versions

Product Affected versions Fixed in
WAGO PFC200 Versions not published

Other CVEs of WAGO PFC200

The 13 CVEs of WAGO PFC200 →
CVE-2019-5181 An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’… Not rated CVE-2019-5180 An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’… Not rated CVE-2019-5179 An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’… Not rated CVE-2019-5178 An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’… Not rated
Track this CVE