deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-19381
Published: 2020-03-11
Description: oauth/oauth2/v1/saml/ in Abacus OAuth Login 2019_01_r4_20191021_0000 before prior to R4 (20.11.2019 Hotfix) allows Reflected Cross Site Scripting (XSS) via an error message.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.compass-security.com/en/research/advisories/; https://www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2019-024_Abacus_Cross-Site_Scripting_XSS.txt; https://www.compass-security.com/en/research/advisories/
CVE: CVE-2020-10376
Published: 2020-03-11
Description: Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Basic" HTTP header.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-319
References: https://medium.com/%40felipeagromao/remote-control-cve-2020-10376-fed7b6b934e3; https://medium.com/%40felipeagromao/remote-control-cve-2020-10376-fed7b6b934e3
CVE: CVE-2020-5203
Published: 2020-03-11
Description: In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled input (e.g., $_REQUEST, $_GET, or $_POST) to the framework's Clear method.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-94
References: https://github.com/bcosca/fatfree-core/commit/dae95a0baf3963a9ef87c17cee52f78f77e21829; https://github.com/bcosca/fatfree/releases; https://github.com/bcosca/fatfree-core/commit/dae95a0baf3963a9ef87c17cee52f78f77e21829
CVE: CVE-2012-1101
Published: 2020-03-11
Description: systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure).
CVSS Score: 5.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2012/03/05/4; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=662029; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1101
CVE: CVE-2019-9095
Published: 2020-03-11
Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-327
References: https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities; https://www.us-cert.gov/ics/advisories/icsa-20-056-01; https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities
CVE: CVE-2019-9096
Published: 2020-03-11
Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Insufficient password requirements for the MGate web application may allow an attacker to gain access by brute-forcing account passwords.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities; https://www.us-cert.gov/ics/advisories/icsa-20-056-01; https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities
CVE: CVE-2019-9097
Published: 2020-03-11
Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A high rate of transit traffic may cause a low-memory condition and a denial of service.
CVSS Score: 5.3 (MEDIUM)
References: https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities; https://www.us-cert.gov/ics/advisories/icsa-20-056-01; https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities
CVE: CVE-2019-9098
Published: 2020-03-11
Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An Integer overflow in the built-in web server allows remote attackers to initiate DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities; https://www.us-cert.gov/ics/advisories/icsa-20-056-01; https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities
CVE: CVE-2019-9099
Published: 2020-03-11
Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A Buffer overflow in the built-in web server allows remote attackers to initiate DoS, and probably to execute arbitrary code (issue 1 of 2).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities; https://www.us-cert.gov/ics/advisories/icsa-20-056-01; https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities
CVE: CVE-2019-9101
Published: 2020-03-11
Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. Sensitive information is sent to the web server in cleartext, which may allow an attacker to discover the credentials if they are able to observe traffic between the web browser and the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities; https://www.us-cert.gov/ics/advisories/icsa-20-056-01; https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities
CVE: CVE-2019-9102
Published: 2020-03-11
Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predictable mechanism of generating tokens allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism.
CVSS Score: 8.8 (HIGH)
CWE: CWE-330
References: https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities; https://www.us-cert.gov/ics/advisories/icsa-20-056-01; https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities
CVE: CVE-2019-9103
Published: 2020-03-11
Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker can access sensitive information (e.g., conduct username disclosure attacks) on the built-in WEB-service without authorization.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities; https://www.us-cert.gov/ics/advisories/icsa-20-056-01; https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities
CVE: CVE-2019-9104
Published: 2020-03-11
Description: An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. The application's configuration file contains parameters that represent passwords in cleartext.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-522
References: https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities; https://www.us-cert.gov/ics/advisories/icsa-20-056-01; https://www.moxa.com/en/support/support/security-advisory/mb3710-[PII_REDACTED]-3660-vulnerabilities
CVE: CVE-2011-2487
Published: 2020-03-11
Description: The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: http://cxf.apache.org/note-on-cve-2011-2487.html; http://rhn.redhat.com/errata/RHSA-2013-0191.html; http://rhn.redhat.com/errata/RHSA-2013-0192.html
CVE: CVE-2020-10181
Published: 2020-03-11
Description: goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demonstrated by a setString=new_user<*1*>administrator<*1*>123456 request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-352, CWE-352
References: http://packetstormsecurity.com/files/156746/Enhanced-Multimedia-Router-3.0.4.27-Cross-Site-Request-Forgery.html; https://github.com/s1kr10s/Sumavision_EMR3.0; https://www.youtube.com/watch?v=Ufcj4D9eA5o
CVE: CVE-2013-1753
Published: 2020-03-11
Description: The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
References: https://bugs.python.org/issue16043; https://bugs.python.org/issue16043
CVE: CVE-2020-8540
Published: 2020-03-11
Description: An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-918
References: https://www.manageengine.com/products/desktop-central/xxe-vulnerability.html; https://www.manageengine.com/products/desktop-central/xxe-vulnerability.html
CVE: CVE-2020-1733
Published: 2020-03-11
Description: A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask 77 && mkdir -p <dir>"; this operation does not fail if the directory already exists and is owned by another user. An attacker could take advantage to gain control of the become user as the target directory can be retrieved by iterating '/proc/<pid>/cmdline'.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-377, CWE-362
References: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1733; https://github.com/ansible/ansible/issues/67791; https://lists.debian.org/debian-lts-announce/2020/05/msg00005.html
CVE: CVE-2020-1979
Published: 2020-03-11
Description: A format string vulnerability in the PAN-OS log daemon (logd) on Panorama allows a network based attacker with knowledge of registered firewall devices and access to Panorama management interfaces to execute arbitrary code, bypassing the restricted shell and escalating privileges. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13 on Panorama. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions.
CVSS Score: 8.1 (HIGH)
CWE: CWE-134, CWE-134
References: https://security.paloaltonetworks.com/CVE-2020-1979; https://security.paloaltonetworks.com/CVE-2020-1979
CVE: CVE-2020-1980
Published: 2020-03-11
Description: A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate privileges. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. This issue is fixed in PAN-OS 8.1.13, and all later versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-77, CWE-78
References: https://security.paloaltonetworks.com/CVE-2020-1980; https://security.paloaltonetworks.com/CVE-2020-1980
CVE: CVE-2020-1981
Published: 2020-03-11
Description: A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execute commands as a low privileged user and gain root access on the PAN-OS hardware or virtual appliance. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions.
CVSS Score: 7.0 (HIGH)
CWE: CWE-377, CWE-668
References: https://security.paloaltonetworks.com/CVE-2020-1981; https://security.paloaltonetworks.com/CVE-2020-1981
CVE: CVE-2[PII_REDACTED]
Published: 2020-03-11
Description: Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-425
References: http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2[PII_REDACTED].html; https://twistedmatrix.com/pipermail/twisted-web/2016-August/005268.html; https://twistedmatrix.com/trac/ticket/8623
CVE: CVE-2020-9408
Published: 2020-03-11
Description: The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker with write permissions to the Spotfire Library, but not "Script Author" group permission, to modify attributes of files and objects saved to the library such that the system treats them as trusted. This could allow an attacker to cause the Spotfire Web Player, Analyst clients, and TERR Service into executing arbitrary code with the privileges of the system account that started those processes. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 10.8.0 and below and TIBCO Spotfire Server: versions 7.11.9 and below, versions 7.12.0, 7.13.0, 7.14.0, 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.3.0, 10.3.1, 10.3.2, 10.3.3, 10.3.4, 10.3.5, and 10.3.6, versions 10.4.0, 10.5.0, 10.6.0, 10.6.1, 10.7.0, and 10.8.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2020/03/tibco-security-advisory-march-11-2020-tibco-spotfire-server; http://www.tibco.com/services/support/advisories
CVE: CVE-2020-1947
Published: 2020-03-11
Description: In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load datasource configuration. SnakeYAML allows to unmarshal data to a Java type By using the YAML tag. Unmarshalling untrusted data can lead to security flaws of RCE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://lists.apache.org/thread.html/r4a61a24c119bd820da6fb02100d286f8aae55c8f9b94a346b9bb27d8%40%3Cdev.shardingsphere.apache.org%3E; https://lists.apache.org/thread.html/r4a61a24c119bd820da6fb02100d286f8aae55c8f9b94a346b9bb27d8%40%3Cdev.shardingsphere.apache.org%3E
CVE: CVE-2019-10807
Published: 2020-03-11
Description: Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/kucherenko/blamer/commit/5fada8c9b6986ecd28942b724fa682e77ce1e11c%2C; https://snyk.io/vuln/SNYK-JS-BLAMER-559541; https://github.com/kucherenko/blamer/commit/5fada8c9b6986ecd28942b724fa682e77ce1e11c%2C
CVE: CVE-2019-5106
Published: 2020-03-11
Description: A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user attempting to log in, in plain text.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-798
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0898; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0898
CVE: CVE-2019-5107
Published: 2020-03-11
Description: A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network traffic can easily intercept, interpret, and manipulate data coming from, or destined for e!Cockpit. This includes passwords, configurations, and binaries being transferred to endpoints.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0899; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0899
CVE: CVE-2019-5134
Published: 2020-03-11
Description: An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and 03.01.07(13), and WAGO PFC100 version 03.00.39(12). A specially crafted authentication request can bypass regular expression filters, resulting in sensitive information disclosure.
CVSS Score: 7.5 (HIGH)
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0923; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0923
CVE: CVE-2019-5135
Published: 2020-03-11
Description: An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt() function which can be exploited to disclose hashed user credentials. This affects WAGO PFC200 Firmware version 03.00.39(12) and version 03.01.07(13), and WAGO PFC100 Firmware version 03.00.39(12).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-327
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0924; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0924
CVE: CVE-2019-5149
Published: 2020-03-11
Description: The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web server and makes use of the FastCGI module, which is intended to provide high performance for all Internet applications without the penalties of Web server APIs. However, the default configuration of this module appears to limit the number of concurrent php-cgi processes to two, which can be abused to cause a denial of service of the entire web server. This affects WAGO PFC200 Firmware version 03.00.39(12) and version 03.01.07(13), and WAGO PFC100 Firmware version 03.00.39(12) and version 03.02.02(14).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0939; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0939
CVE: CVE-2019-5155
Published: 2020-03-11
Description: An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in the firmware update command. This affects WAGO PFC200 Firmware version 03.02.02(14), version 03.01.07(13), and version 03.00.39(12)
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0948; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0948
CVE: CVE-2019-5156
Published: 2020-03-11
Description: An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0949; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0949
CVE: CVE-2019-5157
Published: 2020-03-11
Description: An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject OS commands into the TimeoutUnconfirmed parameter value contained in the Firmware Update command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0950; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0950
CVE: CVE-2019-5158
Published: 2020-03-11
Description: An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware version is being installed. An attacker can create a custom firmware update package with invalid metadata in order to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-798
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0951; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0951
CVE: CVE-2019-5159
Published: 2020-03-11
Description: An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.6.0.7. A specially crafted firmware update file can allow an attacker to write arbitrary files to arbitrary locations on WAGO controllers as a part of executing a firmware update, potentially resulting in code execution. An attacker can create a malicious firmware update package file using any zip utility. The user must initiate a firmware update through e!COCKPIT and choose the malicious wup file using the file browser to trigger the vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0952; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0952
CVE: CVE-2019-5160
Published: 2020-03-11
Description: An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted HTTPS POST request can cause the software to connect to an unauthorized host, resulting in unauthorized access to firmware update functionality. An attacker can send an authenticated HTTPS POST request to direct the Cloud Connectivity software to connect to an attacker controlled Azure IoT Hub node.
CVSS Score: 9.1 (CRITICAL)
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0953; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0953
CVE: CVE-2019-5161
Published: 2020-03-11
Description: An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted XML file will direct the Cloud Connectivity service to download and execute a shell script with root privileges.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-345
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0954; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0954
CVE: CVE-2019-5166
Published: 2020-03-11
Description: An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14). A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2019-0961; https://talosintelligence.com/vulnerability_reports/TALOS-2019-0961