Description
A low-privileged remote attacker could gain unauthorized access to critical resources, such as firmware and certificates, due to improper permission handling during the runtime of services (e.g., FTP/SFTP). This access could allow the attacker to escalate privileges and modify firmware.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WAGO | Coupler 0750-0362 | < FW13 | FW13 |
| WAGO | Coupler 0750-0362/0000-0001 | < FW13 | FW13 |
| WAGO | Coupler 0750-0362/0040-0000 | < FW13 | FW13 |
| WAGO | Coupler 0750-0362/K013-1080 | < FW13 | FW13 |
| WAGO | Coupler 0750-0362/K019-7576 | < FW13 | FW13 |
| WAGO | Coupler 0750-0363 | < FW13 | FW13 |
| WAGO | Coupler 0750-0363/0040-0000 | < FW13 | FW13 |
| WAGO | Coupler 0750-0364/0040-0010 | < FW13 | FW13 |
| WAGO | Coupler 0750-0365/0040-0010 | < FW13 | FW13 |
| WAGO | Coupler 0750-0366 | < FW13 | FW13 |
Advisories 1
- VDE-2025-048 WAGO: Escalation of Privileges in Coupler Firmware CERT@VDE · Sep 8, 2025