{"id":"CVE-2025-41713","aliases":["EUVD-2025-29160","GHSA-4x6r-qc3x-j39x"],"status":"published","title":"WAGO: Vulnerability in hardware switch circuit","description":"During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00374,"percentile":0.31656,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1188"],"published":"2025-09-15T08:00:50Z","modified":"2026-10-23T23:10:00Z","products":[{"vendor":"wago","product":"cc100 0751-9301"},{"vendor":"wago","product":"cc100 0751-9301 hw rev. \u0026lt;082100"},{"vendor":"wago","product":"cc100 0751-9301/k000-0005"},{"vendor":"wago","product":"cc100 0751-9301/k000-0005 hw rev. \u0026lt;082100"},{"vendor":"wago","product":"cc100 0751-9401"},{"vendor":"wago","product":"cc100 0751-9401 hw rev. \u0026lt;052500"},{"vendor":"wago","product":"cc100 0751-9402"},{"vendor":"wago","product":"cc100 0751-9402 hw rev. \u0026lt;032800"},{"vendor":"wago","product":"cc100 0751-9402/0000-0001"},{"vendor":"wago","product":"cc100 0751-9402/0000-0001 hw rev. \u0026lt;052800"},{"vendor":"wago","product":"cc100 0751-9403"},{"vendor":"wago","product":"cc100 0751-9403 hw rev. \u0026lt;022800"},{"vendor":"wago","product":"edge controller 0752-8303/8000-0002"},{"vendor":"wago","product":"edge controller 0752-8303/8000-0002 hw rev. 32500"},{"vendor":"wago","product":"tp600 0762-4101"},{"vendor":"wago","product":"tp600 0762-4101 hw rev. \u0026lt;072500"},{"vendor":"wago","product":"tp600 0762-4102"},{"vendor":"wago","product":"tp600 0762-4102 hw rev. \u0026lt;072500"},{"vendor":"wago","product":"tp600 0762-4104"},{"vendor":"wago","product":"tp600 0762-4104 hw rev. \u0026lt;062500"},{"vendor":"wago","product":"tp600 0762-4201/8000-0001"},{"vendor":"wago","product":"tp600 0762-4201/8000-0001 hw rev. \u0026lt;072500"},{"vendor":"wago","product":"tp600 0762-4201/8000-0002"},{"vendor":"wago","product":"tp600 0762-4201/8000-0002 hw rev. \u0026lt;072500"},{"vendor":"wago","product":"tp600 0762-4301/8000-0002"},{"vendor":"wago","product":"tp600 0762-4301/8000-0002 hw rev. \u0026lt;072500"},{"vendor":"wago","product":"tp600 0762-4302/8000-0002"},{"vendor":"wago","product":"tp600 0762-4302/8000-0002 hw rev. \u0026lt;072500"},{"vendor":"wago","product":"tp600 0762-4303/8000-0002"},{"vendor":"wago","product":"tp600 0762-4303/8000-0002 hw rev. \u0026lt;062500"},{"vendor":"wago","product":"tp600 0762-4304/8000-0002"},{"vendor":"wago","product":"tp600 0762-4304/8000-0002 hw rev. \u0026lt;062500"},{"vendor":"wago","product":"tp600 0762-4305/8000-0002"},{"vendor":"wago","product":"tp600 0762-4305/8000-0002 hw rev. \u0026lt;052500"},{"vendor":"wago","product":"tp600 0762-4306/8000-0001"},{"vendor":"wago","product":"tp600 0762-4306/8000-0001 hw rev. \u0026lt;042500"},{"vendor":"wago","product":"tp600 0762-4306/8000-0002"},{"vendor":"wago","product":"tp600 0762-4306/8000-0002 hw rev. \u0026lt;042500"},{"vendor":"wago","product":"tp600 0762-5201/8000-0001"},{"vendor":"wago","product":"tp600 0762-5201/8000-0001 hw rev. \u0026lt;062500"},{"vendor":"wago","product":"tp600 0762-5203/8000-0001"},{"vendor":"wago","product":"tp600 0762-5203/8000-0001 hw rev. \u0026lt;062500"},{"vendor":"wago","product":"tp600 0762-5204/8000-0001"},{"vendor":"wago","product":"tp600 0762-5204/8000-0001 hw rev. \u0026lt;052500"},{"vendor":"wago","product":"tp600 0762-5205/8000-0001"},{"vendor":"wago","product":"tp600 0762-5205/8000-0001 hw rev. \u0026lt;032500"},{"vendor":"wago","product":"tp600 0762-5206/8000-0001"},{"vendor":"wago","product":"tp600 0762-5206/8000-0001 hw rev. \u0026lt;042500"}],"references":[{"url":"https://certvde.com/en/advisories/VDE-2025-083"},{"url":"https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-083.json"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-41713"},{"url":"https://github.com/advisories/GHSA-4x6r-qc3x-j39x"}],"sources":{"cve":[{"id":"CVE-2025-41713","title":"WAGO: Vulnerability in hardware switch circuit","description":"During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.","status":"published","published":"2025-09-15T08:00:50.241Z","modified":"2025-09-15T15:23:17.088Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:32:31.631102Z"}],"euvd":[{"id":"EUVD-2025-29160","description":"During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.","status":"published","published":"2025-09-15T08:00:50Z","modified":"2025-09-15T15:23:17Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T20:31:44.034664Z"}],"ghsa":[{"id":"GHSA-4x6r-qc3x-j39x","title":"During a short time frame while the device is booting an unauthenticated remote attacker can send...","description":"During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.","status":"published","published":"2025-09-15T09:30:19Z","modified":"2025-09-15T09:30:29Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T15:03:37.061484Z"}],"nvd":[{"id":"CVE-2025-41713","description":"During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.","status":"published","published":"2025-09-15T08:15:35.343Z","modified":"2026-10-23T23:10:00.157Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:11:29.650057Z"}]}}