PT-2025-25539 · Wago+1 · Cc100 0751-9X01+16

Published 2025-06-13 · Updated 2025-11-21 · CVE-2025-25264

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description An unauthenticated remote attacker can take advantage of the current overly permissive CORS policy to gain access and read the responses, potentially exposing sensitive data or enabling further attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-942

Related Identifiers

BDU:2025-06879

CVE-2025-25264

Affected Products

Cc100 0751-9X01

Edge Controller 0752-8303/8000-0002

Pfc100 G1 0750-810X

Pfc100 G1 0750-810X/Xxxx-Xxxx

Pfc100 G2 0750-811X

Pfc100 G2 0750-811X-Xxxx-Xxxx

Pfc200 G1 750-820X

Pfc200 G1 750-820X-Xxx-Xxx

Pfc200 G2 750-821

Pfc200 G2 750-821X-Xxx-Xxx

Tp600 0762-420X/8000-000X

Tp600 0762-430X/8000-000X

Tp600 0762-520X/8000-000X

Tp600 0762-530X/8000-000X

Tp600 0762-620X/8000-000X

Tp600 0762-630X/8000-000X

Compact Controller Cc100

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-25264 · Security Note
• https://bdu.fstec.ru/vul/2025-06879 · Security Note
• https://twitter.com/VulmonFeeds/status/1934577029443137608 · Twitter Post
• https://twitter.com/CVEnew/status/1934556171760718224 · Twitter Post
• https://certvde.com/en/advisories/VDE-2025-018 · Note
• https://twitter.com/cracbot/status/1936378625882017921 · Twitter Post
• https://t.me/cvetracker/26296 · Telegram Post
• https://t.me/cveNotify/137610 · Telegram Post
• https://t.me/cvenotify/125757 · Telegram Post
• https://twitter.com/cracbot/status/1936016248745148531 · Twitter Post
• https://t.me/latest_high_impact_cve/2670 · Telegram Post
• https://t.me/cveNotify/143550 · Telegram Post