CVE-2025-41713
WAGO: Vulnerability in hardware switch circuit
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
WAGO: Vulnerability in hardware switch circuit
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.
- Record
CVE-2025-41713- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L - Weakness
- CWE-1188
- Updated
- 2026-11-02
EUVDEUVD-2025-29160
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.
- Record
EUVD-2025-29160- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4x6r-qc3x-j39x
During a short time frame while the device is booting an unauthenticated remote attacker can send...
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.
- Record
GHSA-4x6r-qc3x-j39x- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L - Weakness
- CWE-1188
- Updated
- 2026-11-02
NVD
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.
- Record
CVE-2025-41713- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L - Weakness
- CWE-1188
- Updated
- 2026-11-02
Affected products
- wago cc100 0751-9301
- wago cc100 0751-9301 hw rev. <082100
- wago cc100 0751-9301/k000-0005
- wago cc100 0751-9301/k000-0005 hw rev. <082100
- wago cc100 0751-9401
- wago cc100 0751-9401 hw rev. <052500
- wago cc100 0751-9402
- wago cc100 0751-9402 hw rev. <032800
- wago cc100 0751-9402/0000-0001
- wago cc100 0751-9402/0000-0001 hw rev. <052800
- wago cc100 0751-9403
- wago cc100 0751-9403 hw rev. <022800
Show 36 moreShow less
- wago edge controller 0752-8303/8000-0002
- wago edge controller 0752-8303/8000-0002 hw rev. 32500
- wago tp600 0762-4101
- wago tp600 0762-4101 hw rev. <072500
- wago tp600 0762-4102
- wago tp600 0762-4102 hw rev. <072500
- wago tp600 0762-4104
- wago tp600 0762-4104 hw rev. <062500
- wago tp600 0762-4201/8000-0001
- wago tp600 0762-4201/8000-0001 hw rev. <072500
- wago tp600 0762-4201/8000-0002
- wago tp600 0762-4201/8000-0002 hw rev. <072500
- wago tp600 0762-4301/8000-0002
- wago tp600 0762-4301/8000-0002 hw rev. <072500
- wago tp600 0762-4302/8000-0002
- wago tp600 0762-4302/8000-0002 hw rev. <072500
- wago tp600 0762-4303/8000-0002
- wago tp600 0762-4303/8000-0002 hw rev. <062500
- wago tp600 0762-4304/8000-0002
- wago tp600 0762-4304/8000-0002 hw rev. <062500
- wago tp600 0762-4305/8000-0002
- wago tp600 0762-4305/8000-0002 hw rev. <052500
- wago tp600 0762-4306/8000-0001
- wago tp600 0762-4306/8000-0001 hw rev. <042500
- wago tp600 0762-4306/8000-0002
- wago tp600 0762-4306/8000-0002 hw rev. <042500
- wago tp600 0762-5201/8000-0001
- wago tp600 0762-5201/8000-0001 hw rev. <062500
- wago tp600 0762-5203/8000-0001
- wago tp600 0762-5203/8000-0001 hw rev. <062500
- wago tp600 0762-5204/8000-0001
- wago tp600 0762-5204/8000-0001 hw rev. <052500
- wago tp600 0762-5205/8000-0001
- wago tp600 0762-5205/8000-0001 hw rev. <032500
- wago tp600 0762-5206/8000-0001
- wago tp600 0762-5206/8000-0001 hw rev. <042500
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-41713 is a medium vulnerability (CVSS 6.5) in Wago Cc100 0751-9301, published September 15, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. No source names a fixed version.