CVE-2025-41713 json
WAGO: Vulnerability in hardware switch circuit
published 2025-09-15 13 mo ago modified 2026-10-23 16 d ago also EUVD-2025-29160
- cvss
- 6.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 31%
- public exploits
- 0
- none known
Summary
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.
Patch / fix
- WAGO CC100 0751-9301 HW rev. <082100 04.08.05
- WAGO CC100 0751-9301/K000-0005 HW rev. <082100 04.08.05
- WAGO CC100 0751-9401 HW rev. <052500 04.08.05
- WAGO CC100 0751-9402/0000-0001 HW rev. <052800 04.08.05
- WAGO CC100 0751-9402 HW rev. <032800 04.08.05
- WAGO CC100 0751-9403 HW rev. <022800 04.08.05
- WAGO Edge Controller 0752-8303/8000-0002 HW rev. 32500 04.08.05
- WAGO TP600 0762-4101 HW rev. <072500 04.08.05
- WAGO TP600 0762-4102 HW rev. <072500 04.08.05
- WAGO TP600 0762-4104 HW rev. <062500 04.08.05
- WAGO TP600 0762-4201/8000-0001 HW rev. <072500 04.08.05
- WAGO TP600 0762-4201/8000-0002 HW rev. <072500 04.08.05
- WAGO TP600 0762-4301/8000-0002 HW rev. <072500 04.08.05
- WAGO TP600 0762-4302/8000-0002 HW rev. <072500 04.08.05
- WAGO TP600 0762-4303/8000-0002 HW rev. <062500 04.08.05
- WAGO TP600 0762-4304/8000-0002 HW rev. <062500 04.08.05
- WAGO TP600 0762-4305/8000-0002 HW rev. <052500 04.08.05
- WAGO TP600 0762-4306/8000-0001 HW rev. <042500 04.08.05
- WAGO TP600 0762-4306/8000-0002 HW rev. <042500 04.08.05
- WAGO TP600 0762-5201/8000-0001 HW rev. <062500 04.08.05
- WAGO TP600 0762-5203/8000-0001 HW rev. <062500 04.08.05
- WAGO TP600 0762-5204/8000-0001 HW rev. <052500 04.08.05
- WAGO TP600 0762-5205/8000-0001 HW rev. <032500 04.08.05
- WAGO TP600 0762-5206/8000-0001 HW rev. <042500 04.08.05
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 13 mo ago
Exploit prediction
0.37% chance of exploitation in the next 30 days, higher than 31% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L |
Affected products
- WAGO CC100 0751-9301
- WAGO CC100 0751-9301 HW rev. <082100
- WAGO CC100 0751-9301/K000-0005
- WAGO CC100 0751-9301/K000-0005 HW rev. <082100
- WAGO CC100 0751-9401
- WAGO CC100 0751-9401 HW rev. <052500
- WAGO CC100 0751-9402
- WAGO CC100 0751-9402/0000-0001
- WAGO CC100 0751-9402/0000-0001 HW rev. <052800
- WAGO CC100 0751-9402 HW rev. <032800
- WAGO CC100 0751-9403
- WAGO CC100 0751-9403 HW rev. <022800
- WAGO Edge Controller 0752-8303/8000-0002
- WAGO Edge Controller 0752-8303/8000-0002 HW rev. 32500
- WAGO TP600 0762-4101
- WAGO TP600 0762-4101 HW rev. <072500
- WAGO TP600 0762-4102
- WAGO TP600 0762-4102 HW rev. <072500
- WAGO TP600 0762-4104
- WAGO TP600 0762-4104 HW rev. <062500
- WAGO TP600 0762-4201/8000-0001
- WAGO TP600 0762-4201/8000-0001 HW rev. <072500
- WAGO TP600 0762-4201/8000-0002
- WAGO TP600 0762-4201/8000-0002 HW rev. <072500
- WAGO TP600 0762-4301/8000-0002
- WAGO TP600 0762-4301/8000-0002 HW rev. <072500
- WAGO TP600 0762-4302/8000-0002
- WAGO TP600 0762-4302/8000-0002 HW rev. <072500
- WAGO TP600 0762-4303/8000-0002
- WAGO TP600 0762-4303/8000-0002 HW rev. <062500
- WAGO TP600 0762-4304/8000-0002
- WAGO TP600 0762-4304/8000-0002 HW rev. <062500
- WAGO TP600 0762-4305/8000-0002
- WAGO TP600 0762-4305/8000-0002 HW rev. <052500
- WAGO TP600 0762-4306/8000-0001
- WAGO TP600 0762-4306/8000-0001 HW rev. <042500
- WAGO TP600 0762-4306/8000-0002
- WAGO TP600 0762-4306/8000-0002 HW rev. <042500
- WAGO TP600 0762-5201/8000-0001
- WAGO TP600 0762-5201/8000-0001 HW rev. <062500
- WAGO TP600 0762-5203/8000-0001
- WAGO TP600 0762-5203/8000-0001 HW rev. <062500
- WAGO TP600 0762-5204/8000-0001
- WAGO TP600 0762-5204/8000-0001 HW rev. <052500
- WAGO TP600 0762-5205/8000-0001
- WAGO TP600 0762-5205/8000-0001 HW rev. <032500
- WAGO TP600 0762-5206/8000-0001
- WAGO TP600 0762-5206/8000-0001 HW rev. <042500
Classification
- Weakness
-
- CWE-1188 Initialization of a Resource with an Insecure Default
References
Sources
- CVE List CVE-2025-41713
- NVD CVE-2025-41713
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.