Security Advisory catalog CVE-2025-41753 Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory .
cve-program · CVE-2025-41753 Published
The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise.
Read the publisher's advisory Affected versions, risk and source history
cve-program · CVE-2025-41753 Published 0751-9x01 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0751-9x01",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0750-811x-xxxx-xxxx Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0750-811x-xxxx-xxxx",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0750-821x-xxx-xxx Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0750-821x-xxx-xxx",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-420x-8000-000x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-420x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-430x-8000-000x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-430x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-520x-8000-000x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-520x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-530x-8000-000x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-530x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-620x-8000-000x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-620x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-630x-8000-000x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-630x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0752-8303-8000-0002 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0752-8303-8000-0002",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-340x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-340x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0751-9x01 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0751-9x01",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0750-811x-xxxx-xxxx Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0750-811x-xxxx-xxxx",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0750-821x-xxx-xxx Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0750-821x-xxx-xxx",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-420x-8000-000x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-420x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-430x-8000-000x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-430x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-520x-8000-000x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-520x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-530x-8000-000x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-530x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-620x-8000-000x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-620x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-630x-8000-000x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-630x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0752-8303-8000-0002 Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0752-8303-8000-0002",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} 0762-340x Vendor product
Publisher's version information Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"defaultStatus": "unaffected",
"product": "0762-340x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
} Original source record · Cite this exact observation · Complete original publisher JSON