← CVE Intelligence

CVE-2019-5156

Wago / WAGO PFC200 Firmware PUBLISHED

Description (CNA)

An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command.

Affected (CNA)

Vendor / productVersions
Wago / WAGO PFC200 Firmwareaffected version 03.02.02(14); affected version 03.01.07(13); affected version 03.00.39(12)

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.