Wago 0852-1328 Firmware vulnerabilities

2 CVEs affecting Wago 0852-1328 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-41732, published 2025-12-10.

More from Wago.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-41732, published 2025-12-10. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.
• CVE-2025-41730, published 2025-12-10. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_account() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.