CVE-2019-5155

An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200

published March 10, 2020

CVSS
—
EPSS
5%
Percentile
91.6
In the wild
Unconfirmed
What it is

An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in the firmware update command. This affects WAGO PFC200 Firmware version 03.02.02(14), version 03.01.07(13), and version 03.00.39(12)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04614 · 91.6th percentile
Published
2020-03-10T21:59Z
EPSS history
Timeline
  • 10 MAR 21:59Z
    An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200
    cvelistv5