https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 17:58:55 +0000 https://vulnerability.circl.lu/vuln/cve-2025-41753 <p><strong>Affected:</strong> WAGO 0751-9x01, WAGO 0750-811x-xxxx-xxxx, WAGO 0750-821x-xxx-xxx, WAGO 0762-420x-8000-000x, WAGO 0762-430x-8000-000x, WAGO 0762-520x-8000-000x, WAGO 0762-530x-8000-000x, WAGO 0762-620x-8000-000x, WAGO 0762-630x-8000-000x, WAGO 0752-8303-8000-0002 and 1 more</p> <p>The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise.</p> <p><strong>Affected:</strong> WAGO 0751-9x01, WAGO 0750-811x-xxxx-xxxx, WAGO 0750-821x-xxx-xxx, WAGO 0762-420x-8000-000x, WAGO 0762-430x-8000-000x, WAGO 0762-520x-8000-000x, WAGO 0762-530x-8000-000x, WAGO 0762-620x-8000-000x, WAGO 0762-630x-8000-000x, WAGO 0752-8303-8000-0002 and 1 more</p> <p>The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise.</p> https://vulnerability.circl.lu/vuln/cve-2025-41753