CVE-2019-5080

An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and…

published December 18, 2019

CVSS
—
EPSS
2%
Percentile
79.1
In the wild
Unconfirmed
What it is

🚨 A single package sent to the WAGO PFC 200 can cause a complete denial of service! It's like dropping a tiny pebble into a busy intersection, causing chaos everywhere! Think of this vulnerability as a traffic light malfunctioning due to one misconfigured signal, halting traffic and causing confusion for everyone. Similarly, an attacker can send a single packet that jams the system, leaving it unresponsive. This could lead to a complete service outage, leaving critical operations frozen! An attacker could cause mayhem, potentially allowing default credentials to be applied, making it easier for further exploitation. Your device would be down for the count — a real nightmare for any security-conscious hero!

Put simply

Think of this vulnerability as a traffic light malfunctioning due to one misconfigured signal, halting traffic and causing confusion for everyone. Similarly, an attacker can send a single packet that jams the system, leaving it unresponsive. This denial-of-service vulnerability exists in the iocheckd service of the WAGO PFC 200 and PFC100, where an unauthenticated packet can disrupt normal operations, allowing attackers to weaken security measures.

What to do

This could lead to a complete service outage, leaving critical operations frozen! An attacker could cause mayhem, potentially allowing default credentials to be applied, making it easier for further exploitation. Your device would be down for the count — a real nightmare for any security-conscious hero! To protect your system, immediately upgrade to the latest firmware versions that address this vulnerability. Ensure that your network configurations are closely monitored and limit unnecessary access to your devices. Regularly check for updates and patches from WAGO! You've got this! Stay proactive and your devices will be secure in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01866 · 79.1th percentile
Published
2019-12-18T20:35Z
EPSS history
Timeline
  • 18 DEC 20:35Z
    An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and…
    cvelistv5