WAGO: Vulnerability in WAGO Device Sphere
view advisory published 2025-06-23
During installation, identical certificates are installed across all systems instead of unique ones, which are intended for JWT Token encryption and signing.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41672US | —OT elevated | — | ||
A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- FixedDevice Sphere
Update to WAGO Device Sphere version 1.0.1. WAGO Device Sphere version 1.0 can't be used after the 30.06.2025.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan