WAGO: Multiple PLCs and Communication Components are Affected by multiple Vulnerabilities leading to RCE
Multiple WAGO devices are affected by CODESYS Control vulnerabilities. The affected WAGO firmware versions are <4.10.0 (FW32) and <4.10.0 (70).
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41739US | — | — | ||
An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an… | ||||
| CVE-2025-41738US | — | — | ||
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading t… | ||||
| CVE-2025-41700US | — | — | ||
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This… | ||||
references
External citations — patches, advisories, analysis.
- CERT@VDE Security Advisories for WAGOexternal
- VDE-2025-081: WAGO: Multiple PLCs and Communication Components are Affected by multiple Vulnerabilities leading to RCE - HTMLself
- VDE-2025-081: WAGO: Multiple PLCs and Communication Components are Affected by multiple Vulnerabilities leading to RCE - CSAFself
- WAGO PSIRTself
remediations (3)
- Fixed
Update to Firmware version 4.10.0 (FW32) or higher. For the latest Custom Firmware please contact the WAGO support.
- Fixed
Update to Firmware version 4.10.0 (FW32) or higher. For the latest Custom Firmware please contact the WAGO support.
- Fixed
Update to Firmware version 4.10.0 (FW32) or higher. For the latest Custom Firmware please contact the WAGO support.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan