CVE-2025-0101
Medium
Description
A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work unexpected or stop working at all. Both during runtime and after a restart.
SeverityMedium
CVSS6.5
Exploit probability—
ProductCC100 0751-9x01
PublishedApr 16, 2025
First seenApr 16, 2025
Weakness typeCWE-190Integer overflow
How to fix
Update
- WAGO CC100 0751-9x0104.07.01 or later
- WAGO PFC100 G1 0750-810x/xxxx-xxxx3.10.11, 03.10.11 or later
- WAGO PFC100 G2 0750-811x-xxxx-xxxx04.07.01 or later
- WAGO PFC200 G1 750-820x-xxx-xxx3.10.11, 03.10.11 or later
- WAGO PFC200 G2 750-821x-xxx-xxx04.07.01 or later
- WAGO TP600 0762-420x/8000-000x04.07.01 or later
- WAGO TP600 0762-430x/8000-000x04.07.01 or later
- WAGO TP600 0762-520x/8000-000x04.07.01 or later
- WAGO TP600 0762-530x/8000-000x04.07.01 or later
- WAGO TP600 0762-620x/8000-000x04.07.01 or later
- WAGO TP600 0762-630x/8000-000x04.07.01 or later
- WAGO WAGO CC100 0751-9x0104.07.01 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WAGO CC100 0751-9x01 | v < 04.07.01 | 04.07.01 |
| WAGO PFC100 G1 0750-810x/xxxx-xxxx | v < 3.10.11, v < 03.10.11 | 3.10.11, 03.10.11 |
| WAGO PFC100 G2 0750-811x-xxxx-xxxx | v < 04.07.01 | 04.07.01 |
| WAGO PFC200 G1 750-820x-xxx-xxx | v < 3.10.11, v < 03.10.11 | 3.10.11, 03.10.11 |
| WAGO PFC200 G2 750-821x-xxx-xxx | v < 04.07.01 | 04.07.01 |
| WAGO TP600 0762-420x/8000-000x | v < 04.07.01 | 04.07.01 |
| WAGO TP600 0762-430x/8000-000x | v < 04.07.01 | 04.07.01 |
| WAGO TP600 0762-520x/8000-000x | v < 04.07.01 | 04.07.01 |
| WAGO TP600 0762-530x/8000-000x | v < 04.07.01 | 04.07.01 |
| WAGO TP600 0762-620x/8000-000x | v < 04.07.01 | 04.07.01 |
| WAGO TP600 0762-630x/8000-000x | v < 04.07.01 | 04.07.01 |
| WAGO WAGO CC100 0751-9x01 | v < 04.07.01 | 04.07.01 |
| WAGO WAGO Edge Controller 0752-8303/8000-0002 | v < 04.07.01 | 04.07.01 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.