PFC100 Firmware
13 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for PFC100 Firmware, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.
PFC100 Firmware CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 13 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical4
- High3
- Medium5
- Low1
Latest CVEs
The 13 most recently published vulnerabilities affecting PFC100 Firmware.
- CVE-2023-3379WAGO: Improper Privilege Management in web-based management5.3
- CVE-2023-4089WAGO: Multiple products vulnerable to local file inclusion2.7
- CVE-2023-1698WAGO: WBM Command Injection in multiple products9.8
- CVE-2022-45140WAGO: Missing Authentication for Critical Function 9.8
- CVE-2022-45139WAGO: Origin validation error through CORS misconfiguration5.3
- CVE-2022-45138WAGO: Missing Authentication for Critical Function9.8
- CVE-2022-45137WAGO: Reflective Cross-Site Scripting6.1
- CVE-2022-3738WAGO: Missing authentication for config export functionality in multiple products5.9
- CVE-2019-5134An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and 03.01.07(13), and WAGO...7.5
- CVE-2019-5135An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controllers. The WBM application make...5.3
- CVE-2019-5149The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web server and makes use of the FastCGI module, which is intende...7.5
- CVE-2019-5082An exploitable heap buffer overflow vulnerability exists in the iocheckd service I/O-Check functionality of WAGO PFC200 Firmware version 03.01.07(13), WAGO PFC200 Firmware version 03.00.39(12), and...9.8
- CVE-2019-10953ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack du...7.5
Product grouping is registry-driven, with AI assist and human review. How it works