CVE-2019-5106
MEDIUM 5.5EPSS 0.3%
A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user attempting to log in, in plain text.
- Affected
- Wago · WAGO e!Cockpit
- CVSS v3.1 NVD
- 5.5 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS v2.0 NVD
- 2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 0.34% chance of exploitation in the next 30 days, 25th percentile
- Published
- 2020-03-10
- Updated
- 2024-08-04