Vulnerability Spotlight: Multiple vulnerabilities in WAGO PFC200

Summary: Cisco Talos discovered multiple exploitable vulnerabilities in the WAGO PFC200 and PFC100 programmable automation controllers, all rooted in the protocol handling code of the iocheckd "I/O-Check" configuration service. The flaws, tracked as CVE-2019-5074 through CVE-2019-5082, allow unauthenticated attackers to remotely execute code, cause denial of service, expose information, or apply default documented credentials to the device.
What's compelling: These controllers run in automotive, rail, power engineering, manufacturing and building management environments, and every listed flaw can be triggered by unauthenticated packets - one of them, CVE-2019-5080, needs only a single packet to weaken login credentials to the default documented set.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2019-5074 CVE-2019-5075 CVE-2019-5077 CVE-2019-5078 CVE-2019-5079
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026