Search
Find a vulnerability
Search criteria
2 vulnerabilities found for 0751-9x01 by WAGO
CVE-2025-41753 (GCVE-0-2025-41753)
Vulnerability from nvd – Published: 2026-10-01 06:42 – Updated: 2026-10-01 19:11
VLAI
EPSS
VEX
Title
Path traversal in dynamically created BACnet File Objects
Summary
The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 19:11 UTC
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
1 reference
Impacted products
22 products
| Vendor | Product | Version | |
|---|---|---|---|
| WAGO | 0751-9x01 |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0750-811x-xxxx-xxxx |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0750-821x-xxx-xxx |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-420x-8000-000x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-430x-8000-000x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-520x-8000-000x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-530x-8000-000x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-620x-8000-000x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-630x-8000-000x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0752-8303-8000-0002 |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-340x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0751-9x01 |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0750-811x-xxxx-xxxx |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0750-821x-xxx-xxx |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-420x-8000-000x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-430x-8000-000x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-520x-8000-000x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-530x-8000-000x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-620x-8000-000x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-630x-8000-000x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0752-8303-8000-0002 |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-340x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-41753",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T19:11:00.419667Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T19:11:15.337Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "0751-9x01",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0750-811x-xxxx-xxxx",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0750-821x-xxx-xxx",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-420x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-430x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-520x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-530x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-620x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-630x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0752-8303-8000-0002",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-340x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0751-9x01",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0750-811x-xxxx-xxxx",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0750-821x-xxx-xxx",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-420x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-430x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-520x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-530x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-620x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-630x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0752-8303-8000-0002",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-340x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise.\u003c/p\u003e"
}
],
"value": "The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T06:42:00.734Z",
"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"shortName": "CERTVDE"
},
"references": [
{
"url": "https://www.certvde.com/en/advisories/VDE-2025-102/"
}
],
"source": {
"advisory": "VDE-2025-102",
"defect": [
"CERT@VDE#641894"
],
"discovery": "UNKNOWN"
},
"title": "Path traversal in dynamically created BACnet File Objects",
"x_generator": {
"engine": "Vulnogram 0.4.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"assignerShortName": "CERTVDE",
"cveId": "CVE-2025-41753",
"datePublished": "2026-10-01T06:42:00.734Z",
"dateReserved": "2025-04-16T11:18:45.759Z",
"dateUpdated": "2026-10-01T19:11:15.337Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-41753 (GCVE-0-2025-41753)
Vulnerability from cvelistv5 – Published: 2026-10-01 06:42 – Updated: 2026-10-01 19:11
VLAI
EPSS
VEX
Title
Path traversal in dynamically created BACnet File Objects
Summary
The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 19:11 UTC
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
1 reference
Impacted products
22 products
| Vendor | Product | Version | |
|---|---|---|---|
| WAGO | 0751-9x01 |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0750-811x-xxxx-xxxx |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0750-821x-xxx-xxx |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-420x-8000-000x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-430x-8000-000x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-520x-8000-000x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-530x-8000-000x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-620x-8000-000x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-630x-8000-000x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0752-8303-8000-0002 |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0762-340x |
Affected:
1.0.0 , < 4.8.9
(semver)
|
|
| WAGO | 0751-9x01 |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0750-811x-xxxx-xxxx |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0750-821x-xxx-xxx |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-420x-8000-000x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-430x-8000-000x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-520x-8000-000x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-530x-8000-000x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-620x-8000-000x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-630x-8000-000x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0752-8303-8000-0002 |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
|
| WAGO | 0762-340x |
Affected:
1.0.0 , < 4.8.9 (70)
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-41753",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T19:11:00.419667Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T19:11:15.337Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "0751-9x01",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0750-811x-xxxx-xxxx",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0750-821x-xxx-xxx",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-420x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-430x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-520x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-530x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-620x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-630x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0752-8303-8000-0002",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-340x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0751-9x01",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0750-811x-xxxx-xxxx",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0750-821x-xxx-xxx",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-420x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-430x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-520x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-530x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-620x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-630x-8000-000x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0752-8303-8000-0002",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "0762-340x",
"vendor": "WAGO",
"versions": [
{
"lessThan": "4.8.9 (70)",
"status": "affected",
"version": "1.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eThe object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise.\u003c/p\u003e"
}
],
"value": "The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the device, which may lead to full system compromise."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T06:42:00.734Z",
"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"shortName": "CERTVDE"
},
"references": [
{
"url": "https://www.certvde.com/en/advisories/VDE-2025-102/"
}
],
"source": {
"advisory": "VDE-2025-102",
"defect": [
"CERT@VDE#641894"
],
"discovery": "UNKNOWN"
},
"title": "Path traversal in dynamically created BACnet File Objects",
"x_generator": {
"engine": "Vulnogram 0.4.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"assignerShortName": "CERTVDE",
"cveId": "CVE-2025-41753",
"datePublished": "2026-10-01T06:42:00.734Z",
"dateReserved": "2025-04-16T11:18:45.759Z",
"dateUpdated": "2026-10-01T19:11:15.337Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}