Description (CNA)
On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WAGO / Series PFC200 Controller | affected 750-823 through FW07; affected 750-829 through FW14; affected 750-831/000-00x through FW14; affected 750-832/000-00x through FW06; affected 750-852 through FW14; affected 750-862 through FW07; affected 750-880/0xx-xxx through FW15; affected 750-881 through FW14; affected 750-882 through FW14; affected 750-885/0xx-xxx through FW14; affected 750-889 through FW14; affected 750-890/0xx-xxx through FW07; affected 750-891 through FW07; affected 750-893 through FW07 |
| WAGO / Series Ethernet Controller | affected 750-8202/xxx-xxx before 03.06.19 (18); affected 750-8203/xxx-xxx before 03.06.19 (18); affected 750-8204/xxx-xxx before 03.06.19 (18); affected 750-8206/xxx-xxx before 03.06.19 (18); affected 750-8207/xxx-xxx before 03.06.19 (18); affected 750-8208/xxx-xxx before 03.06.19 (18); affected 750-8210/xxx-xxx before 03.06.19 (18); affected 750-8211/xxx-xxx before 03.06.19 (18); affected 750-8212/xxx-xxx before 03.06.19 (18); affected 750-8213/xxx-xxx before 03.06.19 (18); affected 750-8214/xxx-xxx before 03.06.19 (18); affected 750-8216/xxx-xxx before 03.06.19 (18); affected 750-8217/xxx-xxx before 03.06.19 (18) |
CWE
CWE-22
References
ADP enrichment
No English description supplied.