Approved changes feed: RSS · Atom

cpe:2.3:a:wago:edge_controller_0752-8303/8000-0002:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWago (32ab7757-de27-5378-a269-9c7ac714c35b)
ProductEdge Controller 0752 8303/8000 0002 (75114308-affc-5964-a99b-45f79e49cf99)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41713 vulnerable 2026-06-08 07:25:07.817519 WAGO: Vulnerability in hardware switch circuit
MEDIUM (6.5)
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.
Published: 2025-09-15T08:00:50.241Z
Updated: 2025-09-15T15:23:17.088Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25265 vulnerable 2026-06-08 07:12:51.065931 Unauthenticated File Read via Web Interface
MEDIUM (4.9)
A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a high privileged remote attacker to read files from the system’s file structure.
Published: 2025-06-16T09:46:13.998Z
Updated: 2025-11-21T11:38:18.852Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25264 vulnerable 2026-06-08 07:12:51.063351 Overly Permissive CORS Policy in WAGO Device Manager
MEDIUM (6.5)
An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.
Published: 2025-06-16T09:45:31.613Z
Updated: 2025-11-21T11:36:54.281Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41974 vulnerable 2026-06-08 06:43:55.794061 WAGO: BACNet Service Property Modification Due to Permission Misconfiguration in Multiple Devices
HIGH (7.1)
A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources which may lead to a DoS limited to BACNet communication.
Published: 2024-11-18T09:05:32.043Z
Updated: 2025-08-27T21:33:03.186Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41973 vulnerable 2026-06-08 06:43:55.793252 WAGO: Remote Arbitrary File Write with Root Privileges in multiple Devices
HIGH (8.1)
A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.
Published: 2024-11-18T09:05:15.892Z
Updated: 2025-08-27T21:33:03.344Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41972 vulnerable 2026-06-08 06:43:55.792035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41971 vulnerable 2026-06-08 06:43:55.791036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41970 vulnerable 2026-06-08 06:43:55.789836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41969 vulnerable 2026-06-08 06:43:55.788200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41968 vulnerable 2026-06-08 06:43:55.786614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41967 vulnerable 2026-06-08 06:43:55.771850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12650 vulnerable 2026-06-08 06:25:35.825945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.