Buffer Overflow Vulnerability in Unspecified Product by Vendor
CVE-2025-41732

8.8HIGH

Key Information:

Vendor

Wago

Status
Indsutrial-managed-switches
Vendor
CVE Published:
10 December 2025

What is CVE-2025-41732?

An unauthenticated remote attacker may exploit unsafe sscanf calls within the check_cookie() function, allowing them to write arbitrary data into fixed-size stack buffers. This vulnerability can lead to a complete compromise of the affected device, making it imperative for users to adopt immediate protective measures.

Affected Version(s)

Indsutrial-Managed-Switches 0.0.0 < 02.64

References

https://certvde.com/de/advisories/VDE-2025-095

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daniel Hulliger from The Cyber-Defence Campus of armasuisse S+T
JSON
.
CVE-2025-41732 : Buffer Overflow Vulnerability in Unspecified Product by Vendor