VULNERABILITY INTELLIGENCE
CVE-2025-41697
CVSS score6.8 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2025-12-09
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.
Weakness classification
- info@cert.vde.com: CWE-1299
Primary references
- info@cert.vde.com — Third Party Advisory