CVE-2019-5107

{"id": "CVE-2019-5107", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2020-03-11T22:27:39.613", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0899", "tags": ["Third Party Advisory"], "source": "talos-cna@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network traffic can easily intercept, interpret, and manipulate data coming from, or destined for e!Cockpit. This includes passwords, configurations, and binaries being transferred to endpoints."}, {"lang": "es", "value": "Existe una vulnerabilidad de transmisi\u00f3n en texto sin cifrar en la funcionalidad de comunicaci\u00f3n de red de WAGO e!Cockpit versi\u00f3n 1.5.1.1. Un atacante con acceso al tr\u00e1fico de red puede interceptar, interpretar y manipular f\u00e1cilmente los datos que provienen de e!Cockpit. Esto incluye contrase\u00f1as, configuraciones y archivos binarios que est\u00e1n siendo transferidos hacia los endpoints."}], "lastModified": "2020-03-13T21:51:20.887", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wago:e\\!cockpit:1.5.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F4B6453-0681-42AF-A16F-B3A7AB3ADAD5"}], "operator": "OR"}]}], "sourceIdentifier": "talos-cna@cisco.com"}