VULNERABILITY INTELLIGENCE

CVE-2025-41648

CVSS score9.8 CRITICAL
EPSS probability0.83%
CISA KEVNot currently listed
Published2025-07-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI.

Weakness classification

  • info@cert.vde.com: CWE-704

Primary references