VULNERABILITY INTELLIGENCE

CVE-2025-41733

CVSS score9.8 CRITICAL
EPSS probability0.65%
CISA KEVNot currently listed
Published2025-11-18
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The commissioning wizard on the affected devices does not validate if the device is already initialized. An unauthenticated remote attacker can construct POST requests to set root credentials.

Weakness classification

  • info@cert.vde.com: CWE-305

Primary references