https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:21:43 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-16851 cnvd-2020-16851 https://cve.radiocsirt.org/vuln/cnvd-2020-16851 https://cve.radiocsirt.org/vuln/euvd-2026-50000 EUVD-2026-50000 https://cve.radiocsirt.org/vuln/euvd-2026-50000 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5177 <p>An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). The destination buffer sp+0x440 is overflowed with the call to sprintf() for any domainname values that are greater than 1024-len(‘/etc/config-tools/edit_dns_server domain-name=‘) in length. A domainname value of length 0x3fa will cause the service to crash.</p> <p>An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). The destination buffer sp+0x440 is overflowed with the call to sprintf() for any domainname values that are greater than 1024-len(‘/etc/config-tools/edit_dns_server domain-name=‘) in length. A domainname value of length 0x3fa will cause the service to crash.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-5177 https://cve.radiocsirt.org/vuln/ghsa-7rwr-c2gp-x6p4 <p>An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). The destination buffer sp+0x440 is overflowed with the call to sprintf() for any domainname values that are greater than 1024-len(‘/etc/config-tools/edit_dns_server domain-name=‘) in length. A domainname value of length 0x3fa will cause the service to crash.</p> <p>An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). The destination buffer sp+0x440 is overflowed with the call to sprintf() for any domainname values that are greater than 1024-len(‘/etc/config-tools/edit_dns_server domain-name=‘) in length. A domainname value of length 0x3fa will cause the service to crash.</p> https://cve.radiocsirt.org/vuln/ghsa-7rwr-c2gp-x6p4 https://cve.radiocsirt.org/vuln/gsd-2019-5177 gsd-2019-5177 https://cve.radiocsirt.org/vuln/gsd-2019-5177 https://cve.radiocsirt.org/vuln/vde-2020-011 <p>An attacker needs an authorized login on the device in order to exploit the herein mentioned vulnerabilities.</p> <p>The reported vulnerabilities allow a local attacker with valid login credentials who is able to create files on the device to change the devices settings, e.g. default gateway address, time server etc. and potentially execute code.</p> <p>An attacker needs an authorized login on the device in order to exploit the herein mentioned vulnerabilities.</p> <p>The reported vulnerabilities allow a local attacker with valid login credentials who is able to create files on the device to change the devices settings, e.g. default gateway address, time server etc. and potentially execute code.</p> https://cve.radiocsirt.org/vuln/vde-2020-011