CNNVD-202512-1993 Information

CNNVD ID

CNNVD-202512-1993

CVE-2025-41732

  • CNNVD Published: 2025-12-10

Description (Chinese)

WAGO Indsutrial-Managed-Switches是德国万可(WAGO)公司的一系列高性能网络设备。 WAGO Indsutrial-Managed-Switches存在安全漏洞,该漏洞源于check_cookie函数中存在不安全sscanf调用,可能导致设备完全被控制。

Description (English)

WAGO Indsutrial-Managed-Switches is a series of high-performance network equipment for the German company Wago. There is a security loophole in the WaGO IndSutrial-Managed-Switches, which stems from the unsafe sscanf call in the check cookie function, which may result in the equipment being completely controlled.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

万可

Published

2025-12-10

Last Modified

2026-02-24

References

https://certvde.com/de/advisories/VDE-2025-095

Patch

https://www.wago.com/us/

Share on: