by Kastro
Paper/Archive/CVE-2025-41672

CVE-2025-41672

WAGO Wago Device Sphere — WAGO: Vulnerability in WAGO Device Sphere

EPSS 0.4%CVSS 10.0
critical.is priorityof 100
37
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 33.4.334 × 206.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices.

Affected

ProductAffectedFixed inSource
Wago Device Sphere1.0.0–CNA

Scores by source

CERTVDE (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcert.vde.com/en/advisories/VDE-2025-057advisorywago.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-057.json