Wago Edge Controller 0752-8303/8000-0002 vulnerabilities

12 CVEs affecting Wago Edge Controller 0752-8303/8000-0002, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-41713, published 2025-09-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-41973, published 2024-11-18. High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days. A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.
CVE-2024-41971, published 2024-11-18. High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days. A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss.
CVE-2024-41972, published 2024-11-18. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges.
CVE-2024-41969, published 2024-11-18. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS.
CVE-2025-25265, published 2025-06-16. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a high privileged remote attacker to read files from the system’s file structure.
CVE-2025-25264, published 2025-06-16. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from…
CVE-2024-41967, published 2024-11-18. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. A low privileged remote attacker may modify the boot mode configuration setup of the device, leading to modification of the firmware upgrade process or a denial-of-service attack.
CVE-2025-41713, published 2025-09-15. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a…
CVE-2024-41974, published 2024-11-18. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for critical resources which may lead to a DoS limited to BACNet communication.
CVE-2024-41970, published 2024-11-18. Medium severity, CVSS 5.7. EPSS: 0.3% chance of exploitation in the next 30 days. A low privileged remote attacker may gain access to forbidden diagnostic data due to incorrect permission assignment for critical resources.

Latest

CVE-2024-12650, published 2025-03-05. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected…