CVE-2018-5459

N/A

Published: February 13, 2018 at 09:00 PM UTC

Updated: June 17, 2026 at 02:00 AM UTC

19 products affected across 1 vendorPFC200 FirmwarePFC200750-8202

Using WAGO PFC200 Series by N/A?

Get instant alerts when new vulnerabilities affect WAGO PFC200 Series - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 3%

Description

An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

PFC200 Firmware · WAGO

95%

v < 02.07.07(10)

Affected range stops below 02.07.07(10), so it looks safe — our inference, not a vendor statement

wago-750-8202 (environment) · wago-750-8202-025-000 (environment) · wago-750-8202-025-001 (environment) · wago-750-8202-025-002 (environment) · wago-750-8202-040-001 (environment) · wago-750-8203 (environment) · wago-750-8203-025-000 (environment) · wago-750-8204 (environment) · wago-750-8204-025-000 (environment) · wago-750-8206 (environment) · wago-750-8206-025-000 (environment) · wago-750-8206-025-001 (environment) · wago-750-8207 (environment) · wago-750-8207-025-000 (environment) · wago-750-8207-025-001 (environment) · wago-750-8208 (environment) · wago-750-8208-025-000 (environment) · wago-pfc200 (same device)

750-8202 · WAGOdevice

80%

All versions

750-8202/025-000 · WAGOdevice

80%

All versions

750-8202/025-001 · WAGOdevice

80%

All versions

750-8202/025-002 · WAGOdevice

80%

All versions