© 2026 vulntracker.io

CVE-2019-5134

HIGH

7.5

CVSS Score

Published: March 10, 2020 at 11:41 PM UTC

Updated: June 17, 2026 at 02:37 AM UTC

4 products affected across 1 vendorPFC200 FirmwarePFC100 FirmwarePFC200

Using WAGO PFC200 Firmware by Wago?

Get instant alerts when new vulnerabilities affect WAGO PFC200 Firmware - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 2%

Description

An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12) and 03.01.07(13), and WAGO PFC100 version 03.00.39(12). A specially crafted authentication request can bypass regular expression filters, resulting in sensitive information disclosure.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

PFC100 Firmware · WAGO

95%

wago-pfc100 (same device)

PFC200 Firmware · WAGO

95%

3.00.39(12)3.01.07(13)

wago-pfc200 (same device)

60%

60%

3.00.39(12)3.01.07(13)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

x_refsource_MISCExploitThird Party Advisory

Source: [email protected]

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0923

CVSS

7.5HIGH[email protected]

Attack Vector: NETWORK
Complexity: LOW
Privileges: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: NONE
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card