CVE-2025-0101

published 2025-04-16

CVE-2025-0101: A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work unexpected or stop working at all. Both during runtime and after a restart.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
wago	cc100_0751-9x01	< 04.07.01	04.07.01
wago	pfc100_g1_0750-810x_xxxx-xxxx	< 3.10.11	3.10.11
wago	pfc100_g1_0750-810x_xxxx-xxxx	< 03.10.11	03.10.11
wago	pfc100_g2_0750-811x-xxxx-xxxx	< 04.07.01	04.07.01
wago	pfc200_g1_750-820x-xxx-xxx	< 3.10.11	3.10.11
wago	pfc200_g1_750-820x-xxx-xxx	< 03.10.11	03.10.11
wago	pfc200_g2_750-821x-xxx-xxx	< 04.07.01	04.07.01
wago	tp600_0762-420x_8000-000x	< 04.07.01	04.07.01
wago	tp600_0762-430x_8000-000x	< 04.07.01	04.07.01
wago	tp600_0762-520x_8000-000x	< 04.07.01	04.07.01
wago	tp600_0762-530x_8000-000x	< 04.07.01	04.07.01
wago	tp600_0762-620x_8000-000x	< 04.07.01	04.07.01
wago	tp600_0762-630x_8000-000x	< 04.07.01	04.07.01
wago	wago_cc100_0751-9x01	< 04.07.01	04.07.01
wago	wago_edge_controller_0752-8303_8000-0002	< 04.07.01	04.07.01

CWE-190