CVE-2019-5075

An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) and…

published December 18, 2019

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

🚨 A crafty packet is all it takes to pop the hood on WAGO's PFC200 and PFC100! 🔥 Think of it like a mischievous kid sneaking packets of candy into a vending machine, tricking it into giving out a whole lot more than just a snack — and you never even saw it coming! With this stack buffer overflow, attackers could execute arbitrary code, potentially gaining full control over the device. Imagine someone turning your smart coffee machine into a spy, brewing up trouble instead of coffee! That's why this vulnerability can't be ignored.

Put simply

Think of it like a mischievous kid sneaking packets of candy into a vending machine, tricking it into giving out a whole lot more than just a snack — and you never even saw it coming! This vulnerability specifically allows unauthenticated packets to trigger a buffer overflow in the 'getcouplerdetails' sub-process of the I/O-Check service, leading to possible remote code execution. It's like an uninvited guest who takes over your tech party without breaking a sweat!

What to do

With this stack buffer overflow, attackers could execute arbitrary code, potentially gaining full control over the device. Imagine someone turning your smart coffee machine into a spy, brewing up trouble instead of coffee! That's why this vulnerability can't be ignored. To secure your systems, upgrade to the latest firmware versions that patch this vulnerability. Ensure you're reviewing your network permissions to restrict unauthorized packet access. Don't forget to monitor your network for suspicious activities as an added precaution! You've got this! Follow these steps, and you’ll be one step closer to being a security superstar! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03866 · 90.1th percentile
Published
2019-12-18T20:51Z
EPSS history
Timeline
  • 18 DEC 20:51Z
    An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) and…
    cvelistv5