Back to CVE records
Medium 6.5Published Sep 15, 2025

CVE-2025-41713WAGO: Vulnerability in hardware switch circuit

Updated under an hour ago ()

Does this affect you?

It affects WAGO CC100 0751-9301 and 47 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.

CVSS
6.5 MEDIUM (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Weakness (CWE)
CWE-1188
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
CERTVDE
NVD analysis
Deferred
Record last updated
Sep 15, 2025
First seen by InfoSec Signals
Oct 23, 2026

Affected products

Affected products
WAGO CC100 0751-9301
wago:cc100_0751_9301 (from the name)
before HW
CNA record
WAGO CC100 0751-9301 HW rev. <082100
wago:cc100_0751_9301_hw_rev_and_lt_082100 (from the name)
before 04.08.05
CNA record
WAGO CC100 0751-9301/K000-0005
wago:cc100_0751_9301_k000_0005 (from the name)
before HW
CNA record
WAGO CC100 0751-9301/K000-0005 HW rev. <082100
wago:cc100_0751_9301_k000_0005_hw_rev_and_lt_082100 (from the name)
before 04.08.05
CNA record
WAGO CC100 0751-9401
wago:cc100_0751_9401 (from the name)
before HW
CNA record
WAGO CC100 0751-9401 HW rev. <052500
wago:cc100_0751_9401_hw_rev_and_lt_052500 (from the name)
before 04.08.05
CNA record
WAGO CC100 0751-9402
wago:cc100_0751_9402 (from the name)
before HW
CNA record
WAGO CC100 0751-9402/0000-0001
wago:cc100_0751_9402_0000_0001 (from the name)
before HW
CNA record
WAGO CC100 0751-9402/0000-0001 HW rev. <052800
wago:cc100_0751_9402_0000_0001_hw_rev_and_lt_052800 (from the name)
before 04.08.05
CNA record
WAGO CC100 0751-9402 HW rev. <032800
wago:cc100_0751_9402_hw_rev_and_lt_032800 (from the name)
before 04.08.05
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.
CVE-2025-41713: WAGO: Vulnerability in hardware switch circuit | InfoSec Signals