CVE-2025-41713

WAGO: Vulnerability in hardware switch circuit

Published Sep 15, 2025 CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Description
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-29160 During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.
History
Type Values Removed Values Added
First Time appeared Wago
Wago cc100
Vendors & Products Wago
Wago cc100
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.
Title WAGO: Vulnerability in hardware switch circuit
Weaknesses CWE-1188
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
CERTVDE
Published
Updated
Sep 15, 2025, 3:23 PM
Reserved
Apr 16, 2025, 11:17 AM
Status
Deferred
Published
Sep 15, 2025, 8:15 AM
Modified
Oct 23, 2026, 11:10 PM