CVE-2019-5160

An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A specially crafted HTTPS POST request can cause the software to connect to an unauthorized host, resulting in unauthorized access to firmware update functionality. An attacker can send an authenticated HTTPS POST request to direct the Cloud Connectivity software to connect to an attacker controlled Azure IoT Hub node.

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0953Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0953Exploit, Third Party Advisory

Published

Mar 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5154An exploitable heap overflow vulnerability exists in the JPE…8.8
• CVE-2019-5155An exploitable command injection vulnerability exists in the…7.2
• CVE-2019-5156An exploitable command injection vulnerability exists in the…7.2
• CVE-2019-5157An exploitable command injection vulnerability exists in the…7.2
• CVE-2019-5158An exploitable firmware downgrade vulnerability exists in th…7.8
• CVE-2019-5159An exploitable improper input validation vulnerability exist…7.8
• CVE-2019-5161An exploitable remote code execution vulnerability exists in…9.1
• CVE-2019-5162An exploitable improper access control vulnerability exists …8.8
• CVE-2019-5163An exploitable denial-of-service vulnerability exists in the…7.5
• CVE-2019-5164An exploitable code execution vulnerability exists in the ss…7.8
• CVE-2019-5165An exploitable authentication bypass vulnerability exists in…7.2
• CVE-2019-5166An exploitable stack buffer overflow vulnerability exists in…7.8