VULNERABILITY INTELLIGENCE
CVE-2025-48466
CVSS score8.1 HIGH
EPSS probability0.56%
CISA KEVNot currently listed
Published2025-06-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Description
Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.
Weakness classification
- CWE-863: Incorrect Authorization
Primary references
- 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 — Exploit, Third Party Advisory
- 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4 — Third Party Advisory