CVE-2018-5459

State: Published
Severity: Not scored
Published: Feb 13, 2018
Updated: Aug 5, 2024
Reserved: Jan 12, 2018

Description

An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455.

Scores

The record has no CVSS score.

Weaknesses

CWE-287

Affected Products

Product	Versions
WAGO PFC200 Seriesn/a	WAGO PFC200 SeriesAffected

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-044-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.