Unauthorized Access Vulnerability in FTP/SFTP Services by Vendor
CVE-2025-41664

7.5HIGH

Key Information:

Vendor

Wago

Status
Coupler 0750-0362
Coupler 0750-0362/0000-0001
Coupler 0750-0362/0040-0000
Coupler 0750-0362/k013-1080
Vendor
CVE Published:
8 September 2025

What is CVE-2025-41664?

This vulnerability allows low-privileged remote attackers to gain unauthorized access to critical resources, including firmware and certificates. The issue arises from improper permission handling during the runtime of FTP/SFTP services. Exploitation of this vulnerability could enable attackers to escalate their privileges and potentially modify firmware, leading to broader security implications.

Affected Version(s)

Coupler 0750-0362 0

Coupler 0750-0362/0000-0001 0

Coupler 0750-0362/0040-0000 0

References

https://certvde.com/de/advisories/VDE-2025-048

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-41664 : Unauthorized Access Vulnerability in FTP/SFTP Services by Vendor