Summary
A vulnerability in sudo allows a low privileged attacker to execute commands with root rights.
Details
Impact
The vulnerability could potentially allow low privileged users to gain complete control over a system, leading to data breaches, modification of critical system files, unauthorized access to sensitive information, and disruption of services.
Remediation
Update to Firmware version 04.08.01 (FW30) or higher.
Mitigation
Until Firmware 30 is available the vulnerability can be mitigated by installing an ipk to update sudo to 1.9.17p1. The ipk is available through the WAGO download center.
Vulnerabilities 1
-
Critical 9.3
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directo…
KEV Sep 29, 2025
Revision history
-
#1
Initial revision.
References
-
WAGO PSIRT
https://www.wago.com/de-en/automation-technology/psirt
-
CERT@VDE Security Advisories for WAGO
https://certvde.com/de/advisories/vendor/wago/
-
VDE-2025-082: WAGO: Critical sudo Vulnerability in Multiple Products - HTML
https://certvde.com/en/advisories/VDE-2025-082