Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-41664

Improper Permission Handling Enables Unauthorized Access to Firmware and Certificates

Description

A low-privileged remote attacker could gain unauthorized access to critical resources, such as firmware and certificates, due to improper permission handling during the runtime of services (e.g., FTP/SFTP). This access could allow the attacker to escalate privileges and modify firmware.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO Coupler 0750-0362

Default version status: unaffected

  • 0 to < FW13affected

WAGO Coupler 0750-0362/0000-0001

Default version status: unaffected

  • 0 to < FW13affected

WAGO Coupler 0750-0362/0040-0000

Default version status: unaffected

  • 0 to < FW13affected

WAGO Coupler 0750-0362/K013-1080

Default version status: unaffected

  • 0 to < FW13affected

WAGO Coupler 0750-0362/K019-7576

Default version status: unaffected

  • 0 to < FW13affected

WAGO Coupler 0750-0363

Default version status: unaffected

  • 0 to < FW13affected

WAGO Coupler 0750-0363/0040-0000

Default version status: unaffected

  • 0 to < FW13affected

WAGO Coupler 0750-0364/0040-0010

Default version status: unaffected

  • 0 to < FW13affected

WAGO Coupler 0750-0365/0040-0010

Default version status: unaffected

  • 0 to < FW13affected

WAGO Coupler 0750-0366

Default version status: unaffected

  • 0 to < FW13affected

References