CVE-2019-5107
Last modified
CVE-2019-5107 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network traffic can easily intercept, interpret, and manipulate data coming from, or destined for e!Cockpit. EPSS estimates a 1.10% chance of exploitation in the next 30 days.
Description
A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network traffic can easily intercept, interpret, and manipulate data coming from, or destined for e!Cockpit. This includes passwords, configurations, and binaries being transferred to endpoints.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wago | E\!Cockpit | 1.5.1.1 |
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0899Third Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0899Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-5107?
How severe is CVE-2019-5107?
How do I fix CVE-2019-5107?
Are you affected by CVE-2019-5107?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST