VULNERABILITY INTELLIGENCE
CVE-2019-5107
CVSS score7.5 HIGH
EPSS probability1.13%
CISA KEVNot currently listed
Published2020-03-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network traffic can easily intercept, interpret, and manipulate data coming from, or destined for e!Cockpit. This includes passwords, configurations, and binaries being transferred to endpoints.
Weakness classification
- CWE-319: Cleartext Transmission of Sensitive Information
Primary references
- talos-cna@cisco.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory