CVE-2025-41732

Stack-based buffer overflow via unsafe sscanf in check_cookie() PUBLISHED

Description (CNA)

An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.

Affected (CNA)

Vendor / product	Versions
WAGO / Indsutrial-Managed-Switches	affected 0.0.0 before 02.64

CWE

CWE-121

References

https://certvde.com/de/advisories/VDE-2025-095

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.