CVE-2019-5106

A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1

published March 10, 2020

CVSS
—
EPSS
0%
Percentile
25.6
In the wild
Unconfirmed
What it is

A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user attempting to log in, in plain text.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.6th percentile
Published
2020-03-10T23:41Z
EPSS history
Timeline
  • 10 MAR 23:41Z
    A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1
    cvelistv5