CVE-2019-5078

An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and…

published December 18, 2019

CVSS
—
EPSS
2%
Percentile
76.4
In the wild
Unconfirmed
What it is

🚨 A crafty attacker can trigger an error state in WAGO PFC devices with just a few specially crafted packets! ⚡ Think of it like a restaurant kitchen that becomes overwhelmed when too many orders arrive at once, leaving the chefs flustered and unable to serve any food. This vulnerability can cause the device to stop all network communications — a real traffic jam for your operations! If exploited, this denial of service could leave your devices incapacitated, halting important functions and disrupting your network. Imagine your building's lights flickering off because the control system gave up — a total blackout!

Put simply

Think of it like a restaurant kitchen that becomes overwhelmed when too many orders arrive at once, leaving the chefs flustered and unable to serve any food. This vulnerability can cause the device to stop all network communications — a real traffic jam for your operations! This denial of service vulnerability in WAGO's iocheckd service allows attackers to send unauthenticated packets that trigger an error state, leading to a complete halt in network communication for the affected devices.

What to do

If exploited, this denial of service could leave your devices incapacitated, halting important functions and disrupting your network. Imagine your building's lights flickering off because the control system gave up — a total blackout! To remediate this issue, ensure your WAGO PFC200 and PFC100 devices are updated to the latest firmware versions. Regularly monitor your network for suspicious activities and implement network segmentation to limit exposure. You've got this! Stay proactive, and your systems will be in tip-top shape! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01655 · 76.4th percentile
Published
2019-12-18T20:51Z
EPSS history
Timeline
  • 18 DEC 20:51Z
    An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and…
    cvelistv5