Wago Pfc Firmware vulnerabilities

2 CVEs affecting Wago Pfc Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8597, published 2020-02-03.

More from Wago.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-8597, published 2020-02-03. Critical severity, CVSS 9.8. EPSS: 19.9% chance of exploitation in the next 30 days. eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.
• CVE-2019-18202, published 2019-10-19. Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days. Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control. A remote attacker can check for the existence of paths and file names via…