https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:29:02 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-19519 cnvd-2020-19519 https://cve.radiocsirt.org/vuln/cnvd-2020-19519 https://cve.radiocsirt.org/vuln/euvd-2026-50023 EUVD-2026-50023 https://cve.radiocsirt.org/vuln/euvd-2026-50023 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5156 <p>An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command.</p> <p>An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-5156 https://cve.radiocsirt.org/vuln/ghsa-4wh8-v3px-8552 <p>An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command.</p> <p>An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command.</p> https://cve.radiocsirt.org/vuln/ghsa-4wh8-v3px-8552 https://cve.radiocsirt.org/vuln/gsd-2019-5156 gsd-2019-5156 https://cve.radiocsirt.org/vuln/gsd-2019-5156 https://cve.radiocsirt.org/vuln/vde-2020-008 <p>The Cloud Connectivity of the WAGO PLCs is used to connect the device with the cloud services from different providers. It also supports maintenance functionality with the firmware update function from the WAGO cloud. An attacker needs an authorized login with administrative privileges on the device in order to exploit the mentioned vulnerabilities.</p> <p>The Cloud Connectivity of the WAGO PLCs is used to connect the device with the cloud services from different providers. It also supports maintenance functionality with the firmware update function from the WAGO cloud. An attacker needs an authorized login with administrative privileges on the device in order to exploit the mentioned vulnerabilities.</p> https://cve.radiocsirt.org/vuln/vde-2020-008