Description
A low privileged attacker can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes the date of the switch to be set back to January 1st, 1970.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WAGO | Fully Managed Switches 0852-0303 | all | — |
| WAGO | Fully Managed Switches 0852-1305 | all | — |
| WAGO | Fully Managed Switches 0852-1305/0000-0001 | all | — |
| WAGO | Fully Managed Switches 0852-1505 | all | — |
| WAGO | Fully Managed Switches 0852-1505/0000-0001 | all | — |
| WAGO | Lean Managed Switches 0852-1812 | all | — |
| WAGO | Lean Managed Switches 0852-1812/0010-0000 | all | — |
| WAGO | Lean Managed Switches 0852-1813 | all | — |
| WAGO | Lean Managed Switches 0852-1813/0000-0001 | all | — |
| WAGO | Lean Managed Switches 0852-1813/0010-0000 | all | — |
| WAGO | Lean Managed Switches 0852-1813/0010-0001 | all | — |
| WAGO | Lean Managed Switches 0852-1816 | all | — |
| WAGO | Lean Managed Switches 0852-1816/0010-0000 | all | — |
Advisories 1
- VDE-2025-020 WAGO: Switches affected by year 2k38 problem CERT@VDE · Jun 2, 2025