Back to Database
Status published
Medium
CVE-2024-41970
WAGO: Unauthorized Diagnostic Data Exposure in Multiple Devices
Vulnerability Description
A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-41970
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Diego Giubertoni
- Nozomi Networks
More from WAGO
View All →CVE-2025-41732
Stack-based buffer overflow via unsafe sscanf in check_cookie()
Critical
9.8
CVE-2025-41730
Stack-based buffer overflow via unsafe sscanf in check_account()
Critical
9.8
CVE-2025-41716
Unauthenticated User Enumeration via Missing Authentication
Medium
5.3
CVE-2025-41715
Missing Authentication for Database Access in Web Application
Critical
9.8
CVE-2025-41713
WAGO: Vulnerability in hardware switch circuit
Medium
6.5
Affected Vendor
WAGO
View all reports →Affected Software
CC100 0751-9x01, PFC100 G2 0750-811x-xxxx-xxxx, PFC200 G2 750-821x-xxx-xxx, TP600 0762-420x/8000-000x, TP600 0762-430x/8000-000x, TP600 0762-520x/8000-000x, TP600 0762-530x/8000-000x, TP600 0762-620x/8000-000x, TP600 0762-630x/8000-000x, Edge Controller 0752-8303/8000-0002, PFC200 G2 0750-821x/xxx-xxx, CC100 0751/9x01
Vulnerable Versions:
0.0.0
Timeline
Official Publish:
November 18th, 2024
Last Modified:
August 27th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N