Wago Pfc 200 Firmware vulnerabilities

9 CVEs affecting Wago Pfc 200 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-12522, published 2020-12-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5081, published 2019-12-18. Critical severity, CVSS 9.8. EPSS: 4.5% chance of exploitation in the next 30 days. An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC 200 Firmware version 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware…
CVE-2019-5075, published 2019-12-18. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware…
CVE-2019-5079, published 2019-12-18. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware…
CVE-2019-5074, published 2019-12-18. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version 03.00.39(12)…
CVE-2020-12522, published 2020-12-17. Critical severity, CVSS 9.8. EPSS: 3.1% chance of exploitation in the next 30 days. The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets in WAGO Series PFC 100 (750-81xx/xxx-xxx), Series PFC 200…
CVE-2019-5078, published 2019-12-18. Critical severity, CVSS 9.1. EPSS: 1.7% chance of exploitation in the next 30 days. An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware…
CVE-2019-5077, published 2019-12-18. Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days. An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC 100 Firmware…
CVE-2019-5073, published 2019-12-18. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware…
CVE-2019-5080, published 2019-12-18. Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days. An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200 Firmware versions 03.01.07(13) and 03.00.39(12), and WAGO PFC100 Firmware…