← CVE Intelligence

CVE-2025-41664

Improper Permission Handling Enables Unauthorized Access to Firmware and Certificates PUBLISHED

Description (CNA)

A low-privileged remote attacker could gain unauthorized access to critical resources, such as firmware and certificates, due to improper permission handling during the runtime of services (e.g., FTP/SFTP). This access could allow the attacker to escalate privileges and modify firmware.

Affected (CNA)

Vendor / productVersions
WAGO / Coupler 0750-0362affected 0 before FW13
WAGO / Coupler 0750-0362/0000-0001affected 0 before FW13
WAGO / Coupler 0750-0362/0040-0000affected 0 before FW13
WAGO / Coupler 0750-0362/K013-1080affected 0 before FW13
WAGO / Coupler 0750-0362/K019-7576affected 0 before FW13
WAGO / Coupler 0750-0363affected 0 before FW13
WAGO / Coupler 0750-0363/0040-0000affected 0 before FW13
WAGO / Coupler 0750-0364/0040-0010affected 0 before FW13
WAGO / Coupler 0750-0365/0040-0010affected 0 before FW13
WAGO / Coupler 0750-0366affected 0 before FW13

CWE

CWE-732

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.