Known vulnerabilities in Wago PFC200 Controller 03.00.39(12)

Vendor: WAGO
Software: Wago PFC200 Controller
Version: 03.00.39(12)
Software CPE: cpe:2.3:h:wago:wago_pfc200_controller:*:*:*:*:*:*:*:*
Website: https://www.wago.us/
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Wago PFC200 Controller version 03.00.39(12) Wago PFC200 Controller 03.00.39(12) is affected by 17 vulnerabilities: 8 high, 9 medium Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26274 -
CVE-2019-5149		 Medium
No
No
 - 20.03.2020 SB2020032007
#VU26273 - Regular Expression without Anchors
CVE-2019-5134		 CWE-777 Medium
No
No
 - 20.03.2020 SB2020032007
#VU26272 - Information Exposure Through Timing Discrepancy
CVE-2019-5135		 CWE-208 Medium
No
No
 - 20.03.2020 SB2020032007
#VU26264 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-5155		 CWE-78 Medium
No
No
 - 20.03.2020 SB2020032007
#VU26262 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-5156		 CWE-78 Medium
No
No
 - 20.03.2020 SB2020032007
#VU26261 - Improper Access Control
CVE-2019-5160		 CWE-284 Medium
No
No
 - 20.03.2020 SB2020032007
#VU26258 - Insufficient Verification of Data Authenticity
CVE-2019-5161		 CWE-345 Medium
No
No
 - 20.03.2020 SB2020032007
#VU26256 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-5157		 CWE-78 Medium
No
No
 - 20.03.2020 SB2020032007
#VU25794 - Memory corruption
CVE-2019-5082		 CWE-119 High
No
No
 - 06.03.2020 SB2019121708
#VU23639 - Missing Authentication for Critical Function
CVE-2019-5077		 CWE-306 High
No
No
 - 17.12.2019 SB2019121708
#VU23638 - Missing Authentication for Critical Function
CVE-2019-5080		 CWE-306 High
No
No
 - 17.12.2019 SB2019121708
#VU23637 - Exposure of sensitive information to an unauthorized actor
CVE-2019-5073		 CWE-200 Medium
No
No
 - 17.12.2019 SB2019121708
#VU23635 - Memory corruption
CVE-2019-5079		 CWE-119 High
No
No
 - 17.12.2019 SB2019121708
#VU23634 - Missing Authentication for Critical Function
CVE-2019-5078		 CWE-306 High
No
No
 - 17.12.2019 SB2019121708
#VU23632 - Memory corruption
CVE-2019-5075		 CWE-119 High
No
No
 - 17.12.2019 SB2019121708
#VU23631 - Memory corruption
CVE-2019-5074		 CWE-119 High
No
No
 - 17.12.2019 SB2019121708
#VU23630 - Memory corruption
CVE-2019-5081		 CWE-119 High
No
No
 - 17.12.2019 SB2019121708