WAGO: Vulnerabilities in WAGO Industrial-Managed Switches
view advisory published 2025-12-10
Two remote stack buffer overflow vulnerabilities were discovered in WAGO industrial switches. These issues originate from unsafe input handling in custom HTTP request parsing functions within the lighttpd binary. The affected binary lacks modern security features such as PIE and RELRO, increasing the risk of successful exploitation.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41732US | — | — | ||
An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full device… | ||||
| CVE-2025-41730US | — | — | ||
An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_account() function to write arbitrary data into fixed-size stack buffers which leads to full devic… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- Fixed
Please update your devices to the specified fixed firmware version.
- Fixed
Please update your devices to the specified fixed firmware version.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan