CVE-2024-41973: high-severity vulnerability in WAGO CC100 0751-9x01
WAGO: Remote Arbitrary File Write with Root Privileges in multiple Devices
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.1epss 0.6%
A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Affected products
WAGO · CC100 0751-9x01WAGO · CC100 0751/9x01WAGO · Edge Controller 0752-8303/8000-0002WAGO · PFC100 G2 0750-811x-xxxx-xxxxWAGO · PFC200 G2 0750-821x/xxx-xxxWAGO · PFC200 G2 750-821x-xxx-xxxWAGO · TP600 0762-420x/8000-000xWAGO · TP600 0762-430x/8000-000xWAGO · TP600 0762-520x/8000-000xWAGO · TP600 0762-530x/8000-000xWAGO · TP600 0762-620x/8000-000xWAGO · TP600 0762-630x/8000-000xRelated CVEs — WAGO CC100 0751-9x01
In the same product, most dangerous first.
CVE-2024-41971HIGHWAGO: Arbitrary File Overwrite in Multiple DevicesEPSS 0.6%CVE-2024-41972MEDIUMWAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple DevicesEPSS 0.6%CVE-2024-41969HIGHWAGO: CODESYS V3 Configuration Authentication Bypass in Multiple DevicesEPSS 0.5%CVE-2025-25265MEDIUMUnauthenticated File Read via Web InterfaceEPSS 0.5%CVE-2025-25264MEDIUMOverly Permissive CORS Policy in WAGO Device ManagerEPSS 0.4%CVE-2024-41967HIGHWAGO: Boot Mode Manipulation in Multiple DevicesEPSS 0.4%