Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2g7j-m3mp-pr8p

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in the firmware update command. This affects WAGO PFC200 Firmware version 03.02.02(14), version 03.01.07(13), and version 03.00.39(12)

An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in the firmware update command. This affects WAGO PFC200 Firmware version 03.02.02(14), version 03.01.07(13), and version 03.00.39(12)

EPSS

Процентиль: 85%
0.02459
Низкий

Связанные уязвимости

CVSS3: 7.2
nvd
почти 6 лет назад

An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in the firmware update command. This affects WAGO PFC200 Firmware version 03.02.02(14), version 03.01.07(13), and version 03.00.39(12)

EPSS

Процентиль: 85%
0.02459
Низкий