CVE-2019-5156

7.2 highEPSS 4.2%

High (7.2) in wago pfc200 firmware. EPSS 4.2% chance of exploitation in the next 30 days.

An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An attacker can inject operating system commands into the TimeoutPrepared parameter value contained in the firmware update command.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2020-03-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wago:pfc200_firmware

References

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0949
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0949

Check your stack JSON