Remote Code Execution Vulnerability in WAGO IoT Tool

CVE-2025-41672

What is CVE-2025-41672?

A significant remote code execution vulnerability has been identified in the WAGO IoT Tool, where an unauthenticated attacker can leverage default certificates to create JSON Web Tokens (JWT). This exploitation provides the attacker with full access to the tool and all connected devices, posing a serious risk to network integrity and security. Administrators are advised to update their systems and revise access controls to mitigate potential threats.

References