critical9.8
CVE-2025-41732
An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which…
Impact
An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wago | 0852-1328 Firmware | before 02.64 |
| Wago | 0852-1322 Firmware | before 02.64 |