Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-5134

An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and 03.01

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
talos

Description

An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and 03.01.07(13), and WAGO PFC100 version 03.00.39(12). A specially crafted authentication request can bypass regular expression filters, resulting in sensitive information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wago WAGO PFC200 Firmware

  • version 03.00.39(12)affected
  • version 03.01.07(13)affected

Wago WAGO PFC100 Firmware

  • version 03.00.39(12)affected

References