Summary
The reported vulnerabilities allow a remote attacker to change the setting, delete the application, set the device to factory defaults, code execution and to cause a system crash or denial of service.
Note(s)
The following products are affected by the listed vulnerabilities:
Series PFC100 (750-81xx/xxx-xxx)
Series PFC200 (750-82xx/xxx-xxx)
The following products are affected by the vulnerability CVE-2019-5078
750-852, 750-831/xxx-xxx, 750-881, 750-880/xxx-xxx, 750-889
750-823, 750-832/xxx-xxx, 750-862, 750-890/xxx-xxx, 750-891
Details
Impact
These vulnerabilities allow an attacker to manipulate the settings or disturb the basic function of the device via specially crafted IP packets. This can be potentially used to get control of the device.
Mitigation
Restrict network access to the device.
Do not directly connect the device to the internet.
Disable unused TCP/UDP-ports
Remediation
The I/O-Check service protocol is only needed during installation and commissioning, not during normal operations. It is highly recommended to disable the IP-port 6626 after commissioning. This is the easiest and securest way to protect your device for the listed vulnerabilities and for upcoming zero day exploits.
Regardless of the action described above, the following CVEs can be fixed alternatively by a firmware update >= FW 15.
CVE-2019-5073
CVE-2019-5074
CVE-2019-5075
CVE-2019-5079
CVE-2019-5081
CVE-2019-5082
Vulnerabilities 7
-
Unscored —
An exploitable information exposure vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC2…
-
Unscored —
An exploitable stack buffer overflow vulnerability exists in the iocheckd service ''I/O-Check'' functionality of WAGO P…
-
Unscored —
An exploitable stack buffer overflow vulnerability exists in the command line utility getcouplerdetails of WAGO PFC200 …
-
Unscored —
An exploitable denial of service vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC200 …
-
Unscored —
An exploitable heap buffer overflow vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC2…
-
Unscored —
An exploitable heap buffer overflow vulnerability exists in the iocheckd service ''I/O-Chec'' functionality of WAGO PFC…
-
Unscored —
An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200…
Revision history
-
#1
Initial revision.
References
-
VDE-2019-022: WAGO: Multiple Vulnerabilities in I/O-Check Service in Multiple Devices - HTML
https://certvde.com/en/advisories/VDE-2019-022/
-
Vendor PSIRT
https://www.wago.com/psirt
-
CERT@VDE Security Advisories for WAGO GmbH & Co. KG
https://certvde.com/en/advisories/vendor/wago/