What’s Vulnerable › Vulnerabilities
CVE-2025-41713: WAGO: Vulnerability in hardware switch circuit
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-09-15 · updated 2026-10-23
- Weakness: CWE-1188
Description
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.
Affected products
- WAGO CC100 0751-9301: before HW — fixed in HW
- WAGO CC100 0751-9301 HW rev. <082100: before 04.08.05 — fixed in 04.08.05
- WAGO CC100 0751-9301/K000-0005: before HW — fixed in HW
- WAGO CC100 0751-9301/K000-0005 HW rev. <082100: before 04.08.05 — fixed in 04.08.05
- WAGO CC100 0751-9401: before HW — fixed in HW
- WAGO CC100 0751-9401 HW rev. <052500: before 04.08.05 — fixed in 04.08.05
- WAGO CC100 0751-9402: before HW — fixed in HW
- WAGO CC100 0751-9402/0000-0001: before HW — fixed in HW
- WAGO CC100 0751-9402/0000-0001 HW rev. <052800: before 04.08.05 — fixed in 04.08.05
- WAGO CC100 0751-9402 HW rev. <032800: before 04.08.05 — fixed in 04.08.05
- WAGO CC100 0751-9403: before HW — fixed in HW
- WAGO CC100 0751-9403 HW rev. <022800: before 04.08.05 — fixed in 04.08.05
- WAGO Edge Controller 0752-8303/8000-0002: before HW — fixed in HW
- WAGO Edge Controller 0752-8303/8000-0002 HW rev. 32500: before 04.08.05 — fixed in 04.08.05
- WAGO TP600 0762-4101: before HW — fixed in HW
- WAGO TP600 0762-4101 HW rev. <072500: before 04.08.05 — fixed in 04.08.05
- WAGO TP600 0762-4102: before HW — fixed in HW
- WAGO TP600 0762-4102 HW rev. <072500: before 04.08.05 — fixed in 04.08.05
- WAGO TP600 0762-4104: before HW — fixed in HW
- WAGO TP600 0762-4104 HW rev. <062500: before 04.08.05 — fixed in 04.08.05
- WAGO TP600 0762-4201/8000-0001: before HW — fixed in HW
- WAGO TP600 0762-4201/8000-0001 HW rev. <072500: before 04.08.05 — fixed in 04.08.05
- WAGO TP600 0762-4201/8000-0002: before HW — fixed in HW
- WAGO TP600 0762-4201/8000-0002 HW rev. <072500: before 04.08.05 — fixed in 04.08.05
- WAGO TP600 0762-4301/8000-0002: before HW — fixed in HW
- WAGO TP600 0762-4301/8000-0002 HW rev. <072500: before 04.08.05 — fixed in 04.08.05
- WAGO TP600 0762-4302/8000-0002: before HW — fixed in HW
- WAGO TP600 0762-4302/8000-0002 HW rev. <072500: before 04.08.05 — fixed in 04.08.05
- WAGO TP600 0762-4303/8000-0002: before HW — fixed in HW
- WAGO TP600 0762-4303/8000-0002 HW rev. <062500: before 04.08.05 — fixed in 04.08.05
How to fix
Upgrade to a fixed version: WAGO CC100 0751-9301 HW; WAGO CC100 0751-9301 HW rev. <082100 04.08.05; WAGO CC100 0751-9301/K000-0005 HW; WAGO CC100 0751-9301/K000-0005 HW rev. <082100 04.08.05; WAGO CC100 0751-9401 HW; WAGO CC100 0751-9401 HW rev. <052500 04.08.05; WAGO CC100 0751-9402 HW; WAGO CC100 0751-9402/0000-0001 HW; WAGO CC100 0751-9402/0000-0001 HW rev. <052800 04.08.05; WAGO CC100 0751-9402 HW rev. <032800 04.08.05; WAGO CC100 0751-9403 HW; WAGO CC100 0751-9403 HW rev. <022800 04.08.05. Check the vendor advisory for mitigations.
References
- https://certvde.com/en/advisories/VDE-2025-083
- https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-083.json
Get alerted when CVE-2025-41713 or the next vulnerability affects your stack