CVE-2025-41713: Wago CC100 0751-9301

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.

Affected products

• Wago CC100 0751-9301
• Wago CC100 0751-9301/k000-0005
• Wago CC100 0751-9301/k000-0005 Hw Rev. <082100: before 04.08.05 (fixed in 04.08.05)
• Wago CC100 0751-9301 Hw Rev. <082100: before 04.08.05 (fixed in 04.08.05)
• Wago CC100 0751-9401
• Wago CC100 0751-9401 Hw Rev. <052500: before 04.08.05 (fixed in 04.08.05)
• Wago CC100 0751-9402
• Wago CC100 0751-9402/0000-0001
• Wago CC100 0751-9402/0000-0001 Hw Rev. <052800: before 04.08.05 (fixed in 04.08.05)
• Wago CC100 0751-9402 Hw Rev. <032800: before 04.08.05 (fixed in 04.08.05)
• Wago CC100 0751-9403
• Wago CC100 0751-9403 Hw Rev. <022800: before 04.08.05 (fixed in 04.08.05)
• Wago Edge Controller 0752-8303/8000-0002
• Wago Edge Controller 0752-8303/8000-0002 Hw Rev. 32500: before 04.08.05 (fixed in 04.08.05)
• Wago TP600 0762-4101
• Wago TP600 0762-4101 Hw Rev. <072500: before 04.08.05 (fixed in 04.08.05)
• Wago TP600 0762-4102
• Wago TP600 0762-4102 Hw Rev. <072500: before 04.08.05 (fixed in 04.08.05)
• Wago TP600 0762-4104
• Wago TP600 0762-4104 Hw Rev. <062500: before 04.08.05 (fixed in 04.08.05)
• Wago TP600 0762-4201/8000-0001
• Wago TP600 0762-4201/8000-0001 Hw Rev. <072500: before 04.08.05 (fixed in 04.08.05)
• Wago TP600 0762-4201/8000-0002
• Wago TP600 0762-4201/8000-0002 Hw Rev. <072500: before 04.08.05 (fixed in 04.08.05)
• Wago TP600 0762-4301/8000-0002
• and 23 more

Published 2025-09-15. Last modified 2026-06-17.