CVE-2019-5159
- EPSS 0.34%
- Veröffentlicht 11.03.2020 22:27:41
- Zuletzt bearbeitet 21.11.2024 04:44:27
An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.6.0.7. A specially crafted firmware update file can allow an attacker to write arbitrary files to arbitrary lo...
CVE-2019-5158
- EPSS 0.26%
- Veröffentlicht 11.03.2020 22:27:40
- Zuletzt bearbeitet 21.11.2024 04:44:27
An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware versio...
CVE-2019-5106
- EPSS 0.06%
- Veröffentlicht 11.03.2020 22:27:39
- Zuletzt bearbeitet 21.11.2024 04:44:21
A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user att...
CVE-2019-5107
- EPSS 0.18%
- Veröffentlicht 11.03.2020 22:27:39
- Zuletzt bearbeitet 21.11.2024 04:44:21
A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network traffic can easily intercept, interpret, and manipulate data coming from, or destined for e...