CVE-2019-5074

—

CVSS 3.1

9.8 critical

EPSS

3%p88

Published

Dec 18, 2019 (Dec 18, 2019)

Modified

Jun 17, 2026

Description

An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version 03.00.39(12) and WAGO PFC100 Firmware version 03.00.39(12). A specially crafted set of packets can cause a stack buffer overflow, resulting in code execution. An attacker can send unauthenticated packets to trigger this vulnerability.

Vendors: wago
Products: pfc 200 firmware, pfc 100 firmware
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.3%)

In the news1 stories

Vulnerability Spotlight: Multiple vulnerabilities in WAGO PFC200

Cisco TalosDec 16, 15:22 UTC · Dec 16, 2019Vulnerability in the wildCVE-2019-5073 CVE-2019-5074 CVE-2019-5075+6 CVEs