Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-41732

Stack-based buffer overflow via unsafe sscanf in check_cookie()

Description

An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO Indsutrial-Managed-Switches

Default version status: unaffected

  • 0.0.0 to < 02.64affected

References