CVE-2019-18202

Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control

Medium · published October 19, 2019

CVSS v3.0
5.8
EPSS
2%
Percentile
78.2
In the wild
Unconfirmed
What it is

Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control. A remote attacker can check for the existence of paths and file names via crafted HTTP requests.

The record
Technical detail
CVSS v3.0
5.8 · MEDIUM
Vector
CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.01789 · 78.2th percentile
Published
2019-10-19T00:02Z
EPSS history
Timeline
  • 19 OCT 00:02Z
    Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control
    cvelistv5