WAGO: Critical sudo Vulnerability in Multiple Products
view advisory published 2025-09-08
A vulnerability in sudo allows a low privileged attacker to execute commands with root rights.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-32463US | high7.8OT critical | KEV | ||
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- Mitigation
Until Firmware 30 is available the vulnerability can be mitigated by installing an ipk to update sudo to 1.9.17p1. The ipk is available through the WAGO download center.
https://downloadcenter.wago.com/wago/software/details/mckqrqwdtxpqe857kf8 - Fixed
Update to Firmware version 04.08.01 (FW30) or higher.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan