CVE-2025-41653

Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches

View on CVE.org
Published May 27, 2025 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-27995 An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.
Title Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches
Weaknesses CWE-410
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
CERTVDE
Published
Updated
May 27, 2025, 1:12 PM
Reserved
Apr 16, 2025, 11:17 AM

View source JSON

Updated
May 27, 2025, 1:11 PM

JSON

Status
Deferred
Published
May 27, 2025, 9:15 AM
Modified
Jun 17, 2026, 9:22 AM

View source JSON

No data.

No data.