CVE-2018-5459

Status: ModifiedCritical (9.8)—

An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455.

CVSS

Version: 3.0
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base score: 9.8

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 2.68%
Percentile among all scored CVEs: 85
Score date: 10/7/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

🎯 ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

Secondary impactT1005 Data from Local Systemcollection
Secondary impactT1485 Data Destructionimpact
Secondary impactT1565.001 Stored Data Manipulationimpact

Source: official MITRE CTID mapping (CVE → ATT&CK).

🛡️ ATT&CK mitigations that cover these techniques

User Account Management Restrict File and Directory Permissions Remote Data Storage Multi-factor Authentication Encrypt Sensitive Information Data Backup

Affected technologies (1)

Wago — Pfc200 Firmware

CWEs

CWE-287
CWE-287

References

Raw JSON (NVD)

Show

{
  "id": "CVE-2018-5459",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "WAGO PFC200 Series",
          "versions": [
            {
              "status": "affected",
              "version": "WAGO PFC200 Series"
            }
          ]
        }
      ]
    }
  ],
  "published": "2018-02-13T21:29:00.207",
  "references": [
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-044-01",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-044-01",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "ics-cert@hq.dhs.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker could execute some unauthenticated commands such as reading, writing, or deleting arbitrary files, or manipulate the PLC application during runtime by sending specially-crafted TCP packets to Port 2455."
    },
    {
      "lang": "es",
      "value": "Se ha descubierto un problema de autenticación indebida en WAGO PFC200 Series 3S CoDeSys Runtime, versiones 2.3.X y 2.4.X. Un atacante puede ejecutar diferentes operaciones remotas sin autenticación gracias a la aplicación CoDeSys Runtime, que está disponible en red por defecto en el puerto 2455. Un atacante podría ejecutar algunos comandos sin autenticación, como la lectura, escritura o eliminación de archivos arbitrarios, así como manipular la aplicación PLC durante el tiempo de ejecución mediante el envío de paquetes TCP especialmente manipulados al puerto 2455."
    }
  ],
  "lastModified": "2026-06-17T02:00:21.240",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:wago:pfc200_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "047F293C-809E-4931-A018-54BCEBD4BD10",
              "versionEndExcluding": "02.07.07\\(10\\)"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:wago:750-8202:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "23B02096-81A5-4823-94F3-D87F389397DE"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8202\\/025-000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1FC647C3-A602-412F-A4DA-5ED092E2779C"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8202\\/025-001:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F5B99800-C5E6-4001-BCBA-2DB5E3CF7D8D"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8202\\/025-002:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DEF4C2B9-4C44-4F83-B0D5-220A1525D254"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8202\\/040-001:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D4E35ACF-6C0A-4C9F-83A8-6CBAF927BE43"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8203:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EC428EC8-532A-4825-BCE3-C42A4BC01C68"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8203\\/025-000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D2E35209-C3F2-4251-9CB5-094FA9B0D076"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8204:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7AF14BE1-1EB5-423B-9FE7-E401AEF92553"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8204\\/025-000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "40B3E682-F1FD-4ADD-B1B8-89D7BA93B3FD"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8206:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2E17ECC4-D7AE-485C-A2EF-4148817F9DB8"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8206\\/025-000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6196935C-97E0-40A2-AF06-03CB72E40B0E"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8206\\/025-001:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1E2892D5-A691-48A9-ACC9-236A50E6A40E"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8207:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DA98A0D9-B050-430B-96C5-15932438FD3A"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8207\\/025-000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6F56DA20-D82B-48C7-B4AD-8534367E8D83"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8207\\/025-001:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5C5C4BAD-7268-4367-A112-60E1A2EF6AF3"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8208:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C86098FC-E63E-4676-8BA1-ADCA30795558"
            },
            {
              "criteria": "cpe:2.3:h:wago:750-8208\\/025-000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8FFE4FF4-4EE4-493F-A8CF-968215142EF4"
            },
            {
              "criteria": "cpe:2.3:h:wago:pfc200:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "688A3248-7EAA-499D-A47C-A4D4900CDBD1"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}