← CVE Intelligence

CVE-2019-5157

Wago / WAGO PFC200 Firmware PUBLISHED

Description (CNA)

An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject OS commands into the TimeoutUnconfirmed parameter value contained in the Firmware Update command.

Affected (CNA)

Vendor / productVersions
Wago / WAGO PFC200 Firmwareaffected version 03.02.02(14); affected version 03.01.07(13); affected version 03.00.39(12)

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.