CVE-2025-1235: Wago Fully Managed Switches 0852-0303

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A low privileged attacker can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes the date of the switch to be set back to January 1st, 1970.

Affected products

• Wago Fully Managed Switches 0852-0303: any version
• Wago Fully Managed Switches 0852-1305: any version
• Wago Fully Managed Switches 0852-1305/0000-0001: any version
• Wago Fully Managed Switches 0852-1505: any version
• Wago Fully Managed Switches 0852-1505/0000-0001: any version
• Wago Lean Managed Switches 0852-1812: any version
• Wago Lean Managed Switches 0852-1812/0010-0000: any version
• Wago Lean Managed Switches 0852-1813: any version
• Wago Lean Managed Switches 0852-1813/0000-0001: any version
• Wago Lean Managed Switches 0852-1813/0010-0000: any version
• Wago Lean Managed Switches 0852-1813/0010-0001: any version
• Wago Lean Managed Switches 0852-1816: any version
• Wago Lean Managed Switches 0852-1816/0010-0000: any version

Published 2025-06-02. Last modified 2026-06-17.