CVE-2025-41650

Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches

View on CVE.org
Published May 27, 2025 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-27993 An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.
Title Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches
Weaknesses CWE-1287
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
CERTVDE
Published
Updated
May 27, 2025, 1:39 PM
Reserved
Apr 16, 2025, 11:17 AM

View source JSON

Updated
May 27, 2025, 1:38 PM

JSON

Status
Deferred
Published
May 27, 2025, 9:15 AM
Modified
Jun 17, 2026, 9:22 AM

View source JSON

No data.

No data.