Back to Database
Status published
Medium
CVE-2025-41713
WAGO: Vulnerability in hardware switch circuit
Vulnerability Description
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-41713
Credits & Attribution
No credits recorded in the NVD database.
References
More from WAGO
View All →CVE-2025-41732
Stack-based buffer overflow via unsafe sscanf in check_cookie()
Critical
9.8
CVE-2025-41730
Stack-based buffer overflow via unsafe sscanf in check_account()
Critical
9.8
CVE-2025-41716
Unauthenticated User Enumeration via Missing Authentication
Medium
5.3
CVE-2025-41715
Missing Authentication for Database Access in Web Application
Critical
9.8
CVE-2025-41672
WAGO: Vulnerability in WAGO Device Sphere
Critical
10
Affected Vendor
WAGO
View all reports →Affected Software
CC100 0751-9301, CC100 0751-9301 HW rev. <082100, CC100 0751-9301/K000-0005, CC100 0751-9301/K000-0005 HW rev. <082100, CC100 0751-9401, CC100 0751-9401 HW rev. <052500, CC100 0751-9402, CC100 0751-9402/0000-0001, CC100 0751-9402/0000-0001 HW rev. <052800, CC100 0751-9402 HW rev. <032800, CC100 0751-9403, CC100 0751-9403 HW rev. <022800, Edge Controller 0752-8303/8000-0002, Edge Controller 0752-8303/8000-0002 HW rev. 32500, TP600 0762-4101, TP600 0762-4101 HW rev. <072500, TP600 0762-4102, TP600 0762-4102 HW rev. <072500, TP600 0762-4104, TP600 0762-4104 HW rev. <062500, TP600 0762-4201/8000-0001, TP600 0762-4201/8000-0001 HW rev. <072500, TP600 0762-4201/8000-0002, TP600 0762-4201/8000-0002 HW rev. <072500, TP600 0762-4301/8000-0002, TP600 0762-4301/8000-0002 HW rev. <072500, TP600 0762-4302/8000-0002, TP600 0762-4302/8000-0002 HW rev. <072500, TP600 0762-4303/8000-0002, TP600 0762-4303/8000-0002 HW rev. <062500, TP600 0762-4304/8000-0002, TP600 0762-4304/8000-0002 HW rev. <062500, TP600 0762-4305/8000-0002, TP600 0762-4305/8000-0002 HW rev. <052500, TP600 0762-4306/8000-0001, TP600 0762-4306/8000-0001 HW rev. <042500, TP600 0762-4306/8000-0002, TP600 0762-4306/8000-0002 HW rev. <042500, TP600 0762-5201/8000-0001, TP600 0762-5201/8000-0001 HW rev. <062500, TP600 0762-5203/8000-0001, TP600 0762-5203/8000-0001 HW rev. <062500, TP600 0762-5204/8000-0001, TP600 0762-5204/8000-0001 HW rev. <052500, TP600 0762-5205/8000-0001, TP600 0762-5205/8000-0001 HW rev. <032500, TP600 0762-5206/8000-0001, TP600 0762-5206/8000-0001 HW rev. <042500
Vulnerable Versions:
0
Timeline
Official Publish:
September 15th, 2025
Last Modified:
September 15th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.