Summary
Successful exploitation of these vulnerabilities could allow an attacker to change settings, delete the application, run remote code, cause a system crash, cause a denial-of-service condition, revert to factory settings, and overwrite MAC addresses.
Vulnerabilities 9
-
Unscored —
An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC2…
-
Unscored —
An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO P…
-
Unscored —
An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 …
-
Unscored —
An exploitable denial-of-service vulnerability exists in the iocheckd service ‘’I/O-Chec’’ functionality of WAGO PFC 20…
-
Unscored —
An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 …
-
Unscored —
An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC2…
-
Unscored —
An exploitable denial-of-service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200…
-
Unscored —
An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC…
-
Unscored —
An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200…
Revision history
-
#1
ICSA-20-065-01 WAGO I/O-CHECK
References
-
ICS Advisory ICSA-20-065-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-065-01
-
Recommended Practices
https://www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B