VYPR
← All advisories
High severity7.2NVD Advisory· Published Mar 11, 2020· Updated Jun 17, 2026

CVE-2019-5155

CVE-2019-5155

Description

An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the parameter values contained in the firmware update command. This affects WAGO PFC200 Firmware version 03.02.02(14), version 03.01.07(13), and version 03.00.39(12)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Wago/Pfc200 Firmware4 versions
    cpe:2.3:o:wago:pfc200_firmware:03.00.39\(12\):*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:wago:pfc200_firmware:03.00.39\(12\):*:*:*:*:*:*:*
    • cpe:2.3:o:wago:pfc200_firmware:03.01.07\(13\):*:*:*:*:*:*:*
    • cpe:2.3:o:wago:pfc200_firmware:03.02.02\(14\):*:*:*:*:*:*:*
    • (no CPE)range: version 03.02.02(14)
  • Wago/PFC200llm-fuzzy
    Range: = 03.02.02(14), = 03.01.07(13), = 03.00.39(12)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.