Skip to content
OpenAdvisories
Critical VDE-2025-102 1 CVE

WAGO: Multiple Devices are affected by a Vulnerability in BACnet IP Stack

Published Oct 1, 2026 · Updated Oct 1, 2026

Vendor: WAGO Product: 0750-811x-xxxx-xxxx Product: 0750-821x-xxx-xxx Product: 0751-9x01 Product: 0752-8303-8000-0002 Product: 0762-340x Product: 0762-420x-8000-000x Product: 0762-430x-8000-000x Product: 0762-520x-8000-000x Product: 0762-530x-8000-000x Product: 0762-620x-8000-000x Product: 0762-630x-8000-000x Product: 4.8.9

Summary

Multiple WAGO devices are affected by a vulnerability in the dynamic creation of BACnet File Objects. The object name is used as a file path without sufficient validation and is not restricted to the intended directory, so relative paths can be used to reach files elsewhere in the file system.

Details

Impact
An attacker can read or overwrite arbitrary files without authentication via BACnet File Object indirect addressing. This may expose sensitive data (e.g., password files) and enable full system compromise or service disruption.

Remediation
Update to Firmware version 4.8.9 (FW30) or higher. For the latest custom Firmware please contact the WAGO support.

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-41753

    Path traversal in dynamically created BACnet File Objects

    The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read o…

    WAGO 0762-520x-8000-000x 0762-620x-8000-000x 0751-9x01 ICS / OT

Revision history

  1. #1.0.0

    Release version.

References