Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WAGO Indsutrial-Managed-Switches 02.64 Clear all filters
TI-2025-27694 CVE-2025-41732 · GHSA-cprc-hgv2-3jr8

Stack-based buffer overflow via unsafe sscanf in check_cookie()

Priority MEDIUM 49

An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00429 Published 2025-12-10 Fixed in 02.64 CWE-121
TI-2025-27692 CVE-2025-41730 · GHSA-mf5w-78vr-g8gf

Stack-based buffer overflow via unsafe sscanf in check_account()

Priority MEDIUM 49

An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_account() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00429 Published 2025-12-10 Fixed in 02.64 CWE-121