← CVE Intelligence

CVE-2025-1235

WAGO: Switches affected by year 2k38 problem PUBLISHED

Description (CNA)

A low privileged attacker can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes the date of the switch to be set back to January 1st, 1970.

Affected (CNA)

Vendor / productVersions
WAGO / Fully Managed Switches 0852-0303affected all
WAGO / Fully Managed Switches 0852-1305affected all
WAGO / Fully Managed Switches 0852-1305/0000-0001affected all
WAGO / Fully Managed Switches 0852-1505affected all
WAGO / Fully Managed Switches 0852-1505/0000-0001affected all
WAGO / Lean Managed Switches 0852-1812affected all
WAGO / Lean Managed Switches 0852-1812/0010-0000affected all
WAGO / Lean Managed Switches 0852-1813affected all
WAGO / Lean Managed Switches 0852-1813/0000-0001affected all
WAGO / Lean Managed Switches 0852-1813/0010-0000affected all
WAGO / Lean Managed Switches 0852-1813/0010-0001affected all
WAGO / Lean Managed Switches 0852-1816affected all
WAGO / Lean Managed Switches 0852-1816/0010-0000affected all

CWE

CWE-190

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.