cnvd - cnvd-2020-17491

cnvd-2020-17491

Vulnerability from cnvd

Title

WAGO PFC 200数据伪造问题漏洞

Description

WAGO PFC 200是德国WAGO公司的一款可编程逻辑控制器（PLC）。使用03.02.02(14)、03.01.07(13)和03.00.39(12)版本固件的WAGO PFC200中的云连接功能存在远程代码执行漏洞。攻击者可利用该漏洞借助特制的XML文件以root权限下载并执行shell脚本。

Severity

高

Formal description

目前厂商尚未提供相关漏洞补丁链接，请关注厂商主页随时更新： https://www.wago.com/

Reference

https://nvd.nist.gov/vuln/detail/CVE-2019-5161

Impacted products

Name
['WAGO PFC200 03.01.07(13)', 'WAGO PFC200 03.00.39(12)', 'WAGO PFC200 03.02.02(14)']

Show details on source website

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-5161"
    }
  },
  "description": "WAGO PFC 200\u662f\u5fb7\u56fdWAGO\u516c\u53f8\u7684\u4e00\u6b3e\u53ef\u7f16\u7a0b\u903b\u8f91\u63a7\u5236\u5668\uff08PLC\uff09\u3002\n\n\u4f7f\u752803.02.02(14)\u300103.01.07(13)\u548c03.00.39(12)\u7248\u672c\u56fa\u4ef6\u7684WAGO PFC200\u4e2d\u7684\u4e91\u8fde\u63a5\u529f\u80fd\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u501f\u52a9\u7279\u5236\u7684XML\u6587\u4ef6\u4ee5root\u6743\u9650\u4e0b\u8f7d\u5e76\u6267\u884cshell\u811a\u672c\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5c1a\u672a\u63d0\u4f9b\u76f8\u5173\u6f0f\u6d1e\u8865\u4e01\u94fe\u63a5\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u968f\u65f6\u66f4\u65b0\uff1a\r\nhttps://www.wago.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-17491",
  "openTime": "2020-03-18",
  "products": {
    "product": [
      "WAGO PFC200 03.01.07(13)",
      "WAGO PFC200 03.00.39(12)",
      "WAGO PFC200 03.02.02(14)"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-5161",
  "serverity": "\u9ad8",
  "submitTime": "2020-03-12",
  "title": "WAGO PFC 200\u6570\u636e\u4f2a\u9020\u95ee\u9898\u6f0f\u6d1e"
}

CVE-2019-5161 (GCVE-0-2019-5161)

Vulnerability from cvelistv5

Published

2020-03-10 23:32

Modified

2024-08-04 19:47

Severity ?

CWE

remote code execution

Summary

An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted XML file will direct the Cloud Connectivity service to download and execute a shell script with root privileges.

References

URL

Tags

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0954

x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Wago	WAGO PFC200 Firmware	Version: version 03.02.02(14) Version: version 03.01.07(13) Version: version 03.00.39(12)

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T19:47:56.616Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0954"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "WAGO PFC200 Firmware",
          "vendor": "Wago",
          "versions": [
            {
              "status": "affected",
              "version": "version 03.02.02(14)"
            },
            {
              "status": "affected",
              "version": "version 03.01.07(13)"
            },
            {
              "status": "affected",
              "version": "version 03.00.39(12)"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted XML file will direct the Cloud Connectivity service to download and execute a shell script with root privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "remote code execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-03-10T23:32:14",
        "orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
        "shortName": "talos"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0954"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "talos-cna@cisco.com",
          "ID": "CVE-2019-5161",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "WAGO PFC200 Firmware",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "version 03.02.02(14)"
                          },
                          {
                            "version_value": "version 03.01.07(13)"
                          },
                          {
                            "version_value": "version 03.00.39(12)"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Wago"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted XML file will direct the Cloud Connectivity service to download and execute a shell script with root privileges."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "remote code execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0954",
              "refsource": "MISC",
              "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0954"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
    "assignerShortName": "talos",
    "cveId": "CVE-2019-5161",
    "datePublished": "2020-03-10T23:32:14",
    "dateReserved": "2019-01-04T00:00:00",
    "dateUpdated": "2024-08-04T19:47:56.616Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.