Read the docs
TI-2025-27676 Aliases CVE-2025-41713GHSA-4x6r-qc3x-j39x

WAGO: Vulnerability in hardware switch circuit

Priority LOW 35CWE-1188Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · None · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00374 31st percentileScored 2026-11-07
Fix Fixed CC100 0751-9301 (WAGO): HWCC100 0751-9301 HW rev. <082100 (WAGO): 04.08.05+46 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
WAGOCC100 0751-9301before HWHWPatch availableCNA
WAGOCC100 0751-9301 HW rev. <082100before 04.08.0504.08.05Patch availableCNA
WAGOCC100 0751-9301/K000-0005before HWHWPatch availableCNA
WAGOCC100 0751-9301/K000-0005 HW rev. <082100before 04.08.0504.08.05Patch availableCNA
WAGOCC100 0751-9401before HWHWPatch availableCNA
WAGOCC100 0751-9401 HW rev. <052500before 04.08.0504.08.05Patch availableCNA
WAGOCC100 0751-9402before HWHWPatch availableCNA
WAGOCC100 0751-9402/0000-0001before HWHWPatch availableCNA
WAGOCC100 0751-9402/0000-0001 HW rev. <052800before 04.08.0504.08.05Patch availableCNA
WAGOCC100 0751-9402 HW rev. <032800before 04.08.0504.08.05Patch availableCNA
WAGOCC100 0751-9403before HWHWPatch availableCNA
WAGOCC100 0751-9403 HW rev. <022800before 04.08.0504.08.05Patch availableCNA
WAGOEdge Controller 0752-8303/8000-0002before HWHWPatch availableCNA
WAGOEdge Controller 0752-8303/8000-0002 HW rev. 32500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4101before HWHWPatch availableCNA
WAGOTP600 0762-4101 HW rev. <072500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4102before HWHWPatch availableCNA
WAGOTP600 0762-4102 HW rev. <072500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4104before HWHWPatch availableCNA
WAGOTP600 0762-4104 HW rev. <062500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4201/8000-0001before HWHWPatch availableCNA
WAGOTP600 0762-4201/8000-0001 HW rev. <072500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4201/8000-0002before HWHWPatch availableCNA
WAGOTP600 0762-4201/8000-0002before HWHWPatch availableCNA
WAGOTP600 0762-4201/8000-0002 HW rev. <072500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4201/8000-0002 HW rev. <072500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4301/8000-0002before HWHWPatch availableCNA
WAGOTP600 0762-4301/8000-0002 HW rev. <072500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4302/8000-0002before HWHWPatch availableCNA
WAGOTP600 0762-4302/8000-0002 HW rev. <072500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4303/8000-0002before HWHWPatch availableCNA
WAGOTP600 0762-4303/8000-0002 HW rev. <062500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4304/8000-0002before HWHWPatch availableCNA
WAGOTP600 0762-4304/8000-0002 HW rev. <062500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4305/8000-0002before HWHWPatch availableCNA
WAGOTP600 0762-4305/8000-0002 HW rev. <052500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4306/8000-0001before HWHWPatch availableCNA
WAGOTP600 0762-4306/8000-0001 HW rev. <042500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-4306/8000-0002before HWHWPatch availableCNA
WAGOTP600 0762-4306/8000-0002 HW rev. <042500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-5201/8000-0001before HWHWPatch availableCNA
WAGOTP600 0762-5201/8000-0001 HW rev. <062500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-5203/8000-0001before HWHWPatch availableCNA
WAGOTP600 0762-5203/8000-0001 HW rev. <062500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-5204/8000-0001before HWHWPatch availableCNA
WAGOTP600 0762-5204/8000-0001before HWHWPatch availableCNA
WAGOTP600 0762-5204/8000-0001 HW rev. <052500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-5204/8000-0001 HW rev. <052500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-5205/8000-0001before HWHWPatch availableCNA
WAGOTP600 0762-5205/8000-0001 HW rev. <032500before 04.08.0504.08.05Patch availableCNA
WAGOTP600 0762-5206/8000-0001before HWHWPatch availableCNA
WAGOTP600 0762-5206/8000-0001 HW rev. <042500before 04.08.0504.08.05Patch availableCNA
  • CC100 0751-9301 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • CC100 0751-9301 HW rev. <082100 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • CC100 0751-9301/K000-0005 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • CC100 0751-9301/K000-0005 HW rev. <082100 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • CC100 0751-9401 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • CC100 0751-9401 HW rev. <052500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • CC100 0751-9402 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • CC100 0751-9402/0000-0001 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • CC100 0751-9402/0000-0001 HW rev. <052800 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • CC100 0751-9402 HW rev. <032800 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • CC100 0751-9403 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • CC100 0751-9403 HW rev. <022800 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • Edge Controller 0752-8303/8000-0002 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • Edge Controller 0752-8303/8000-0002 HW rev. 32500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4101 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4101 HW rev. <072500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4102 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4102 HW rev. <072500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4104 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4104 HW rev. <062500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4201/8000-0001 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4201/8000-0001 HW rev. <072500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4201/8000-0002 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4201/8000-0002 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4201/8000-0002 HW rev. <072500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4201/8000-0002 HW rev. <072500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4301/8000-0002 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4301/8000-0002 HW rev. <072500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4302/8000-0002 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4302/8000-0002 HW rev. <072500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4303/8000-0002 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4303/8000-0002 HW rev. <062500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4304/8000-0002 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4304/8000-0002 HW rev. <062500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4305/8000-0002 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4305/8000-0002 HW rev. <052500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4306/8000-0001 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4306/8000-0001 HW rev. <042500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-4306/8000-0002 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-4306/8000-0002 HW rev. <042500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-5201/8000-0001 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-5201/8000-0001 HW rev. <062500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-5203/8000-0001 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-5203/8000-0001 HW rev. <062500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-5204/8000-0001 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-5204/8000-0001 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-5204/8000-0001 HW rev. <052500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-5204/8000-0001 HW rev. <052500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-5205/8000-0001 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-5205/8000-0001 HW rev. <032500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA
  • TP600 0762-5206/8000-0001 VendorWAGO Affected before HW Fixed in HW Patch available CNA
  • TP600 0762-5206/8000-0001 HW rev. <042500 VendorWAGO Affected before 04.08.05 Fixed in 04.08.05 Patch available CNA

Remediation

  • Fix · CNA CC100 0751-9301 (WAGO) Fixed in HW
  • Fix · CNA CC100 0751-9301 HW rev. <082100 (WAGO) Fixed in 04.08.05
  • Fix · CNA CC100 0751-9301/K000-0005 (WAGO) Fixed in HW
  • Fix · CNA CC100 0751-9301/K000-0005 HW rev. <082100 (WAGO) Fixed in 04.08.05
  • Fix · CNA CC100 0751-9401 (WAGO) Fixed in HW
  • Fix · CNA CC100 0751-9401 HW rev. <052500 (WAGO) Fixed in 04.08.05
  • Fix · CNA CC100 0751-9402 (WAGO) Fixed in HW
  • Fix · CNA CC100 0751-9402/0000-0001 (WAGO) Fixed in HW
  • Fix · CNA CC100 0751-9402/0000-0001 HW rev. <052800 (WAGO) Fixed in 04.08.05
  • Fix · CNA CC100 0751-9402 HW rev. <032800 (WAGO) Fixed in 04.08.05
  • Fix · CNA CC100 0751-9403 (WAGO) Fixed in HW
  • Fix · CNA CC100 0751-9403 HW rev. <022800 (WAGO) Fixed in 04.08.05
  • Fix · CNA Edge Controller 0752-8303/8000-0002 (WAGO) Fixed in HW
  • Fix · CNA Edge Controller 0752-8303/8000-0002 HW rev. 32500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4101 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4101 HW rev. <072500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4102 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4102 HW rev. <072500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4104 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4104 HW rev. <062500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4201/8000-0001 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4201/8000-0001 HW rev. <072500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4201/8000-0002 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4201/8000-0002 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4201/8000-0002 HW rev. <072500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4201/8000-0002 HW rev. <072500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4301/8000-0002 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4301/8000-0002 HW rev. <072500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4302/8000-0002 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4302/8000-0002 HW rev. <072500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4303/8000-0002 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4303/8000-0002 HW rev. <062500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4304/8000-0002 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4304/8000-0002 HW rev. <062500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4305/8000-0002 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4305/8000-0002 HW rev. <052500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4306/8000-0001 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4306/8000-0001 HW rev. <042500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-4306/8000-0002 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-4306/8000-0002 HW rev. <042500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-5201/8000-0001 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-5201/8000-0001 HW rev. <062500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-5203/8000-0001 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-5203/8000-0001 HW rev. <062500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-5204/8000-0001 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-5204/8000-0001 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-5204/8000-0001 HW rev. <052500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-5204/8000-0001 HW rev. <052500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-5205/8000-0001 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-5205/8000-0001 HW rev. <032500 (WAGO) Fixed in 04.08.05
  • Fix · CNA TP600 0762-5206/8000-0001 (WAGO) Fixed in HW
  • Fix · CNA TP600 0762-5206/8000-0001 HW rev. <042500 (WAGO) Fixed in 04.08.05

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-41713
  2. 2026-10-03 Alias added: GHSA-4x6r-qc3x-j39x

References

Other 2

  • TI-2023-01594 WAGO: WBM Command Injection in multiple products CVSS 3.1CRITICAL 9.8
  • TI-2020-06893 eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. CVSS 3.1CRITICAL 9.8
  • TI-2018-09314 An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware… CVSS 3.1HIGH 8.8
  • TI-2025-18921 Unauthenticated File Read via Web Interface CVSS 3.1MEDIUM 4.9
  • TI-2026-18391 Stack Overflow via Oversized Cookie Fields in lighttpd CVSS 3.1CRITICAL 9.8
  • TI-2026-18390 Stack Overflow via SESSIONID Cookie in lighttpd CVSS 3.1CRITICAL 9.8
See all 145 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences