← CVE Intelligence

CVE-2020-12522

Command Injection Vulnerability in I/O-Check Service of WAGO PFC100, PFC200 and Touch Panel 600 Series with firmware versions <=FW10 PUBLISHED

Description (CNA)

The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200 (750-82xx/xxx-xxx), Series Wago Touch Panel 600 Standard Line (762-4xxx), Series Wago Touch Panel 600 Advanced Line (762-5xxx), Series Wago Touch Panel 600 Marine Line (762-6xxx) with firmware versions <=FW10.

Affected (CNA)

Vendor / productVersions
WAGO / Series PFC 100 (750-81xx/xxx-xxx)affected FW1 through FW10
WAGO / Series PFC 200 (750-82xx/xxx-xxx)affected FW1 through FW10
WAGO / Series Wago Touch Panel 600 Standard Line (762-4xxx)affected FW1 through FW10
WAGO / Series Wago Touch Panel 600 Advanced Line (762-5xxx)affected FW1 through FW10
WAGO / Series Wago Touch Panel 600 Marine Line (762-6xxx)affected FW1 through FW10

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.