Riskcovery

CVE-2025-41753

Path traversal in dynamically created BACnet File Objects

State
Published
Severity
9.3 Critical
Published
Oct 1, 2026
Updated
Oct 1, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise.

Scores

CVSSScoreVectorSource
4.09.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NCERTVDE
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCERTVDE

Weaknesses

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

ProductVersions
0751-9x01WAGO
  • 1.0.0 to before 4.8.9Affected
0750-811x-xxxx-xxxxWAGO
  • 1.0.0 to before 4.8.9Affected
0750-821x-xxx-xxxWAGO
  • 1.0.0 to before 4.8.9Affected
0762-420x-8000-000xWAGO
  • 1.0.0 to before 4.8.9Affected
0762-430x-8000-000xWAGO
  • 1.0.0 to before 4.8.9Affected
0762-520x-8000-000xWAGO
  • 1.0.0 to before 4.8.9Affected
0762-530x-8000-000xWAGO
  • 1.0.0 to before 4.8.9Affected
0762-620x-8000-000xWAGO
  • 1.0.0 to before 4.8.9Affected
0762-630x-8000-000xWAGO
  • 1.0.0 to before 4.8.9Affected
0752-8303-8000-0002WAGO
  • 1.0.0 to before 4.8.9Affected
0762-340xWAGO
  • 1.0.0 to before 4.8.9Affected
0751-9x01WAGO
  • 1.0.0 to before 4.8.9 (70)Affected
0750-811x-xxxx-xxxxWAGO
  • 1.0.0 to before 4.8.9 (70)Affected
0750-821x-xxx-xxxWAGO
  • 1.0.0 to before 4.8.9 (70)Affected
0762-420x-8000-000xWAGO
  • 1.0.0 to before 4.8.9 (70)Affected
0762-430x-8000-000xWAGO
  • 1.0.0 to before 4.8.9 (70)Affected
0762-520x-8000-000xWAGO
  • 1.0.0 to before 4.8.9 (70)Affected
0762-530x-8000-000xWAGO
  • 1.0.0 to before 4.8.9 (70)Affected
0762-620x-8000-000xWAGO
  • 1.0.0 to before 4.8.9 (70)Affected
0762-630x-8000-000xWAGO
  • 1.0.0 to before 4.8.9 (70)Affected
0752-8303-8000-0002WAGO
  • 1.0.0 to before 4.8.9 (70)Affected
0762-340xWAGO
  • 1.0.0 to before 4.8.9 (70)Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.