CVE-2018-5459

Estado: ModificadaCrítica (9.8)—

An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455.

CVSS

Versión: 3.0
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Puntuación base: 9.8

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 2.68%
Percentil entre todas las CVEs puntuadas: 85
Fecha de la puntuación: 6/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Impacto secundarioT1005 Data from Local Systemcollection
Impacto secundarioT1485 Data Destructionimpact
Impacto secundarioT1565.001 Stored Data Manipulationimpact

Fuente: mapeo oficial MITRE CTID (CVE → ATT&CK).

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

User Account Management Restrict File and Directory Permissions Remote Data Storage Multi-factor Authentication Encrypt Sensitive Information Data Backup

Tecnologías afectadas (1)

Wago — Pfc200 Firmware

CWE

CWE-287
CWE-287

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2018-5459",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "WAGO PFC200 Series",
          "versions": [
            {
              "status": "affected",
              "version": "WAGO PFC200 Series"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-02-13T21:29:00.207",
  "references": [
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-044-01",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-044-01",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "ics-cert@hq.dhs.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455."
    },
    {
      "lang": "es",
      "value": "Se ha descubierto un problema de autenticación indebida en WAGO PFC200 Series 3S CoDeSys Runtime, versiones 2.3.X y 2.4.X. Un atacante puede ejecutar diferentes operaciones remotas sin autenticación gracias a la aplicación CoDeSys Runtime, que está disponible en red por defecto en el puerto 2455. Un atacante podría ejecutar algunos comandos sin autenticación, como la lectura, escritura o eliminación de archivos arbitrarios, así como manipular la aplicación PLC durante el tiempo de ejecución mediante el envío de paquetes TCP especialmente manipulados al puerto 2455."
    }
  ],
  "lastModified": "2026-06-17T02:00:21.240",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:wago:pfc200_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "047F293C-809E-4931-A018-54BCEBD4BD10",
              "versionEndExcluding": "02.07.07\\(10\\)"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "23B02096-81A5-4823-94F3-D87F389397DE"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8202\\/025-000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1FC647C3-A602-412F-A4DA-5ED092E2779C"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8202\\/025-001:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F5B99800-C5E6-4001-BCBA-2DB5E3CF7D8D"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8202\\/025-002:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DEF4C2B9-4C44-4F83-B0D5-220A1525D254"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8202\\/040-001:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D4E35ACF-6C0A-4C9F-83A8-6CBAF927BE43"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8203:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EC428EC8-532A-4825-BCE3-C42A4BC01C68"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8203\\/025-000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D2E35209-C3F2-4251-9CB5-094FA9B0D076"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8204:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7AF14BE1-1EB5-423B-9FE7-E401AEF92553"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8204\\/025-000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "40B3E682-F1FD-4ADD-B1B8-89D7BA93B3FD"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8206:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2E17ECC4-D7AE-485C-A2EF-4148817F9DB8"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8206\\/025-000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6196935C-97E0-40A2-AF06-03CB72E40B0E"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8206\\/025-001:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1E2892D5-A691-48A9-ACC9-236A50E6A40E"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8207:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DA98A0D9-B050-430B-96C5-15932438FD3A"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8207\\/025-000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6F56DA20-D82B-48C7-B4AD-8534367E8D83"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8207\\/025-001:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5C5C4BAD-7268-4367-A112-60E1A2EF6AF3"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8208:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C86098FC-E63E-4676-8BA1-ADCA30795558"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8208\\/025-000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8FFE4FF4-4EE4-493F-A8CF-968215142EF4"
            },
            {
              "criteria": "cpe:2.3:h:wago:pfc200:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "688A3248-7EAA-499D-A47C-A4D4900CDBD1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}