CVE-2019-5171

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send specially crafted packet at 0x1ea48 to the extracted hostname value from the xml file that is used as an argument to /etc/config-tools/config_interfaces interface=X1 state=enabled ip-address=<contents of ip node> using sprintf().

• CWE-78

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0962Exploit, Technical Description, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0962Exploit, Technical Description, Third Party Advisory

Published

Mar 12, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5165An exploitable authentication bypass vulnerability exists in…7.2
• CVE-2019-5166An exploitable stack buffer overflow vulnerability exists in…7.8
• CVE-2019-5167An exploitable command injection vulnerability exists in the…7.8
• CVE-2019-5168An exploitable command injection vulnerability exists in the…7.8
• CVE-2019-5169An exploitable command injection vulnerability exists in the…7.8
• CVE-2019-5170An exploitable command injection vulnerability exists in the…7.8
• CVE-2019-5172An exploitable command injection vulnerability exists in the…7.8
• CVE-2019-5173An exploitable command injection vulnerability exists in the…7.8
• CVE-2019-5174An exploitable command injection vulnerability exists in the…7.8
• CVE-2019-5175An exploitable command injection vulnerability exists in the…7.8
• CVE-2019-5176An exploitable stack buffer overflow vulnerability vulnerabi…5.5
• CVE-2019-5177An exploitable stack buffer overflow vulnerability vulnerabi…5.5