CVE-2025-25264

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Jun 16, 2025
Source updated: Nov 21, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Overly Permissive CORS Policy in WAGO Device Manager

An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code. The current overly permissive CORS policy allows the attacker to obtain any files from the file system.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

CC100 0751-9x01

Vendor: WAGO
Product: CC100 0751-9x01
Platforms: Unknown
Default status: unaffected

CC100 0751-9x01 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (FW29)	Unavailable	None listed

CC100 0751-9x01

Vendor: WAGO
Product: CC100 0751-9x01
Platforms: Unknown
Default status: unaffected

CC100 0751-9x01 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (70	Unavailable	None listed

PFC100 G1 0750-810x/xxxx-xxxx

Vendor: WAGO
Product: PFC100 G1 0750-810x/xxxx-xxxx
Platforms: Unknown
Default status: unaffected

PFC100 G1 0750-810x/xxxx-xxxx · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	3.10.11 (FW22 Patch 2)	Unavailable	None listed

PFC100 G2 0750-811x-xxxx-xxxx

Vendor: WAGO
Product: PFC100 G2 0750-811x-xxxx-xxxx
Platforms: Unknown
Default status: unaffected

PFC100 G2 0750-811x-xxxx-xxxx · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (70)	Unavailable	None listed

PFC200 G1 750-820x-xxx-xxx

Vendor: WAGO
Product: PFC200 G1 750-820x-xxx-xxx
Platforms: Unknown
Default status: unaffected

PFC200 G1 750-820x-xxx-xxx · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	3.10.11 (FW22 Patch 2)	Unavailable	None listed

PFC200 G2 750-821x-xxx-xxx

Vendor: WAGO
Product: PFC200 G2 750-821x-xxx-xxx
Platforms: Unknown
Default status: unaffected

PFC200 G2 750-821x-xxx-xxx · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (FW29)	Unavailable	None listed

PFC200 G2 750-821x-xxx-xxx

Vendor: WAGO
Product: PFC200 G2 750-821x-xxx-xxx
Platforms: Unknown
Default status: unaffected

PFC200 G2 750-821x-xxx-xxx · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (70)	Unavailable	None listed

TP600 0762-420x/8000-000x

Vendor: WAGO
Product: TP600 0762-420x/8000-000x
Platforms: Unknown
Default status: unaffected

TP600 0762-420x/8000-000x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (FW29)	Unavailable	None listed

TP600 0762-420x/8000-000x

Vendor: WAGO
Product: TP600 0762-420x/8000-000x
Platforms: Unknown
Default status: unaffected

TP600 0762-420x/8000-000x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (70)	Unavailable	None listed

TP600 0762-430x/8000-000x

Vendor: WAGO
Product: TP600 0762-430x/8000-000x
Platforms: Unknown
Default status: unaffected

TP600 0762-430x/8000-000x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (FW29)	Unavailable	None listed

TP600 0762-430x/8000-000x

Vendor: WAGO
Product: TP600 0762-430x/8000-000x
Platforms: Unknown
Default status: unaffected

TP600 0762-430x/8000-000x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (70)	Unavailable	None listed

TP600 0762-520x/8000-000x

Vendor: WAGO
Product: TP600 0762-520x/8000-000x
Platforms: Unknown
Default status: unaffected

TP600 0762-520x/8000-000x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (FW29)	Unavailable	None listed

TP600 0762-520x/8000-000x

Vendor: WAGO
Product: TP600 0762-520x/8000-000x
Platforms: Unknown
Default status: unaffected

TP600 0762-520x/8000-000x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (70)	Unavailable	None listed

TP600 0762-530x/8000-000x

Vendor: WAGO
Product: TP600 0762-530x/8000-000x
Platforms: Unknown
Default status: unaffected

TP600 0762-530x/8000-000x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (FW29)	Unavailable	None listed

TP600 0762-530x/8000-000x

Vendor: WAGO
Product: TP600 0762-530x/8000-000x
Platforms: Unknown
Default status: unaffected

TP600 0762-530x/8000-000x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (70)	Unavailable	None listed

TP600 0762-620x/8000-000x

Vendor: WAGO
Product: TP600 0762-620x/8000-000x
Platforms: Unknown
Default status: unaffected

TP600 0762-620x/8000-000x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (FW29)	Unavailable	None listed

TP600 0762-620x/8000-000x

Vendor: WAGO
Product: TP600 0762-620x/8000-000x
Platforms: Unknown
Default status: unaffected

TP600 0762-620x/8000-000x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (70)	Unavailable	None listed

TP600 0762-630x/8000-000x

Vendor: WAGO
Product: TP600 0762-630x/8000-000x
Platforms: Unknown
Default status: unaffected

TP600 0762-630x/8000-000x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (FW29)	Unavailable	None listed

TP600 0762-630x/8000-000x

Vendor: WAGO
Product: TP600 0762-630x/8000-000x
Platforms: Unknown
Default status: unaffected

TP600 0762-630x/8000-000x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (70)	Unavailable	None listed

Edge Controller 0752-8303/8000-0002

Vendor: WAGO
Product: Edge Controller 0752-8303/8000-0002
Platforms: Unknown
Default status: unaffected

Edge Controller 0752-8303/8000-0002 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (FW29)	Unavailable	None listed

Edge Controller 0752-8303/8000-0002

Vendor: WAGO
Product: Edge Controller 0752-8303/8000-0002
Platforms: Unknown
Default status: unaffected

Edge Controller 0752-8303/8000-0002 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	04.07.01 (70)	Unavailable	None listed