Skip to content
Sign in
6.5 Medium

CVE-2025-0101 A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time…

Description

A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work unexpected or stop working at all. Both during runtime and after a restart.

Affected products and versions

Product Affected versions Fixed in
CC100 0751-9x01 04.07 earliest → < 04.07.01 04.07.01
PFC100 G1 0750-810x/xxxx-xxxx 03.10 earliest → < 03.10.11 03.10.11
PFC100 G2 0750-811x-xxxx-xxxx 04.07 earliest → < 04.07.01 04.07.01
PFC200 G1 750-820x-xxx-xxx 03.10 earliest → < 03.10.11 03.10.11
PFC200 G2 750-821x-xxx-xxx 04.07 earliest → < 04.07.01 04.07.01
TP600 0762-420x/8000-000x 04.07 earliest → < 04.07.01 04.07.01
TP600 0762-430x/8000-000x 04.07 earliest → < 04.07.01 04.07.01
TP600 0762-520x/8000-000x 04.07 earliest → < 04.07.01 04.07.01
TP600 0762-530x/8000-000x 04.07 earliest → < 04.07.01 04.07.01
Show the 4 other branches
Product Affected versions Fixed in
TP600 0762-620x/8000-000x 04.07 earliest → < 04.07.01 04.07.01
TP600 0762-630x/8000-000x 04.07 earliest → < 04.07.01 04.07.01
WAGO CC100 0751-9x01 04.07 earliest → < 04.07.01 04.07.01
WAGO Edge Controller 0752-8303/8000-0002 04.07 earliest → < 04.07.01 04.07.01

Other CVEs of CC100 0751-9x01

The 12 CVEs of CC100 0751-9x01 →
CVE-2025-25265 A web application for configuring the controller is accessible at a specific path 4.9 Medium CVE-2025-25264 An unauthenticated remote attacker can trick an admin to visit a website containing malicious java script code 6.5 Medium CVE-2024-12650 An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid… 5.4 Medium CVE-2024-41974 A low privileged remote attacker may modify the BACNet service properties due to incorrect permission assignment for… 7.1 High
Track this CVE