Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2019-5155 | An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can… | High (7.2) | 2020-03-11 | Environment Specific |
| CVE-2019-5149 | The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs … | High (7.5) | 2020-03-11 | Environment Specific |
| CVE-2019-5135 | An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management … | Medium (5.3) | 2020-03-11 | Environment Specific |
| CVE-2019-5134 | An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication… | High (7.5) | 2020-03-11 | Environment Specific |
| CVE-2019-5107 | A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.… | High (7.5) | 2020-03-11 | Environment Specific |