CVE-2019-5184 Use after free in Wago

What is CVE-2019-5184?

CVE-2019-5184 is a high-severity use after free vulnerability in Wago, published on 23 Mar 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality of WAGO PFC 200. A specially crafted XML cache file written to a specific location on the device can cause a heap pointer to be freed twice, resulting in a denial of service and potentially code execution. An attacker can send a specially crafted packet to trigger the parsing of this cache file.

Weakness: CWE-415

Which versions are affected by CVE-2019-5184?

It affects 1 product.

Products include Wago Pfc200 Firmware.

How do I fix CVE-2019-5184?

No fix has been published for CVE-2019-5184 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2019-5184 being exploited?

There is no known exploitation of CVE-2019-5184 in the wild and no public exploit code.

Other vulnerabilities in Wago

• CVE-2018-5459 Auth bypass in WAGO PFC200 Series Critical 9.8
• CVE-2019-5160 Server-side request forgery in WAGO PFC200 Firmware Critical 9.1
• CVE-2019-5161 Code injection in WAGO PFC200 Firmware Critical 9.1
• CVE-2019-5169 Command injection in WAGO PFC200 High 7.8
• CVE-2019-5170 Command injection in WAGO PFC200 High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-rfcj-g83x-pvhm.