CVE-2025-41672Exploit

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-1188

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Exploit: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Exploit

1100.0%

Full discourse1 post

CVE Brief@DailyCVEBrief141d
Exploit
Last summer, WAGO Device Sphere shipped every install with the same JWT signing certificate baked into the installer. Buy the software, extract the key, mint admin tokens for any Device Sphere on the internet. CVE-2025-41672, CVSS 10.0. https://t.co/nlif3blCn1
Post summary
The text reveals that WAGO Device Sphere ships with a hard‑coded JWT signing certificate, enabling attackers to mint privileged admin tokens and potentially compromise any device, highlighting a high‑severity vulnerability (CVE-2025-41672) without providing a PoC or patch.
10000677
18 followersView on X

Explore more

Back to dashboard