PT-2025-36443 · Wago · Wago Coupler 0750-0362

CVE-2025-41664 · Published 2025-09-08 · Updated 2025-09-13

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: WAGO Coupler 0750-0362 (affected versions not specified)

Description: A low-privileged remote attacker could gain unauthorized access to critical resources, such as firmware and certificates, due to improper permission handling during the runtime of services like FTP/SFTP. This access could allow the attacker to escalate privileges and modify firmware.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2025-41664

Affected Products

Wago Coupler 0750-0362

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-41664 · Security Note
• https://t.me/CVEtracker/31941 · Telegram Post
• https://twitter.com/transilienceai/status/1964996864786456781 · Twitter Post
• https://twitter.com/CVEnew/status/1964944557528797291 · Twitter Post
• https://twitter.com/cracbot/status/1966819192193380531 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1964962213942251949 · Twitter Post
• https://twitter.com/offseq/status/1964954493738504367 · Twitter Post
• https://certvde.com/de/advisories/VDE-2025-048 · Note
• https://twitter.com/transilienceai/status/1964996877721772406 · Twitter Post