For awareness Medium Check exposure in your normal cycle
Multiple WAGO controllers affected by CODESYS flaws that allow remote code execution
CERT@VDE advisoriesWAGO, CODESYS
What happened. CERT@VDE advisory VDE-2025-081 says several WAGO devices are affected by flaws in CODESYS Control. The affected firmware versions are below 4.10.0 (FW32) and below 4.10.0 (70).
Who is affected. Users of WAGO programmable logic controllers (PLCs) and communication components running firmware before 4.10.0 that includes CODESYS Control.
What to do. Check whether you run WAGO devices with firmware below 4.10.0 and follow the WAGO advisory VDE-2025-081 for fixes.
When to act. For awareness: no known exploitation and no score stated
Editor's reading
Forasset ownerOT security lead
- Purdue level
- L1
Why: The advisory covers PLCs and communication components running CODESYS Control, which sit at the controller level (L1).
- Are you exposed?
Search your asset inventory for WAGO PLCs and communication components and compare firmware versions against 4.10.0.
- If you cannot fix it yet
- Restrict access to the controllers to known engineering hosts at the OT firewall.
- Segment the devices from the corporate network and block internet access to them.
- Watch for
- Look for connections to the controllers from hosts that are not engineering workstations.
- Look for unexpected program downloads or controller restarts.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: CERT@VDE advisories (opens certvde.com)
More on WAGO