CVE-2025-41664: Improper Permission Handling Enables Unauthorized Access to Firmware and Certificates

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-08 · updated 2026-06-17
Weakness: CWE-732

Description

A low-privileged remote attacker could gain unauthorized access to critical resources, such as firmware and certificates, due to improper permission handling during the runtime of services (e.g., FTP/SFTP). This access could allow the attacker to escalate privileges and modify firmware.

Affected products

WAGO Coupler 0750-0362: before FW13 — fixed in FW13
WAGO Coupler 0750-0362/0000-0001: before FW13 — fixed in FW13
WAGO Coupler 0750-0362/0040-0000: before FW13 — fixed in FW13
WAGO Coupler 0750-0362/K013-1080: before FW13 — fixed in FW13
WAGO Coupler 0750-0362/K019-7576: before FW13 — fixed in FW13
WAGO Coupler 0750-0363: before FW13 — fixed in FW13
WAGO Coupler 0750-0363/0040-0000: before FW13 — fixed in FW13
WAGO Coupler 0750-0364/0040-0010: before FW13 — fixed in FW13
WAGO Coupler 0750-0365/0040-0010: before FW13 — fixed in FW13
WAGO Coupler 0750-0366: before FW13 — fixed in FW13

How to fix

Upgrade to a fixed version: WAGO Coupler 0750-0362 FW13; WAGO Coupler 0750-0362/0000-0001 FW13; WAGO Coupler 0750-0362/0040-0000 FW13; WAGO Coupler 0750-0362/K013-1080 FW13; WAGO Coupler 0750-0362/K019-7576 FW13; WAGO Coupler 0750-0363 FW13; WAGO Coupler 0750-0363/0040-0000 FW13; WAGO Coupler 0750-0364/0040-0010 FW13; WAGO Coupler 0750-0365/0040-0010 FW13; WAGO Coupler 0750-0366 FW13. Check the vendor advisory for mitigations.

References

https://certvde.com/de/advisories/VDE-2025-048

Get alerted when CVE-2025-41664 or the next vulnerability affects your stack