Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2019-5168

UNKNOWN
Published 2020-03-10T22:25:57
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2019-5168. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). An attacker can send a specially crafted XML cache file At 0x1e8a8 the extracted domainname value from the xml file is used as an argument to /etc/config-tools/edit_dns_server domain-name=<contents of domainname node> using sprintf().This command is later executed via a call to system().

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Wago

WAGO PFC200 Firmware

Affected Versions:

version 03.02.02(14)

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-3q35-r527-69h9

Advisory Details

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). An attacker can send a specially crafted XML cache file At 0x1e8a8 the extracted domainname value from the xml file is used as an argument to /etc/config-tools/edit_dns_server domain-name=&lt;contents of domainname node&gt; using sprintf().This command is later executed via a call to system().

CVSS Scoring

CVSS Score

5.0

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2019-5168
WEB https://talosintelligence.com/vulnerability_reports/TALOS-2019-0962

Advisory provided by GitHub Security Advisory Database. Published: May 24, 2022, Modified: May 24, 2022

References

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0962
Published: 2020-03-10T22:25:57
Last Modified: 2024-08-04T19:47:56.825Z
Copied to clipboard!