CVE-2019-5077

An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and…

published December 18, 2019

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

⚠️ Just a few rogue packets could bring a WAGO PFC device to its knees! This denial-of-service vulnerability can knock out network communication like a power outage in a well-lit house. 🔌 Think of it like a restaurant where customers can order food without paying. A few mischievous diners could keep placing orders without consequence, causing the kitchen to get overwhelmed and eventually shut down. That's how an attacker can flood the iocheckd service with packets and trigger a device error state! If exploited, this vulnerability can lead to a complete communication breakdown for the device, leaving it unable to interact with the network. This could result in operational delays, loss of control over automated systems, and potentially significant downtime for your processes – not great news for any business relying on these devices!

Put simply

Think of it like a restaurant where customers can order food without paying. A few mischievous diners could keep placing orders without consequence, causing the kitchen to get overwhelmed and eventually shut down. That's how an attacker can flood the iocheckd service with packets and trigger a device error state! This vulnerability in the iocheckd service of WAGO PFC 200 and 100 firmware allows unauthenticated packets to trigger a denial of service, pushing the device into an error state that halts all network communications.

What to do

If exploited, this vulnerability can lead to a complete communication breakdown for the device, leaving it unable to interact with the network. This could result in operational delays, loss of control over automated systems, and potentially significant downtime for your processes – not great news for any business relying on these devices! To safeguard your systems, it's recommended to update to the latest firmware versions of WAGO PFC 200 and 100. Regularly audit your network traffic and set strict rules to filter out any suspicious packets that could cause disruptions. Don't leave your devices vulnerable! You've got this! Stay proactive with your security, and you'll have your devices humming along safely in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01643 · 76.2th percentile
Published
2019-12-18T19:53Z
EPSS history
Timeline
  • 18 DEC 19:53Z
    An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and…
    cvelistv5