CVE-2025-41731

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-41731", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "state": "PUBLISHED", "assignerShortName": "CERTVDE", "dateReserved": "2025-04-16T11:17:48.319Z", "datePublished": "2025-11-10T07:44:40.644Z", "dateUpdated": "2025-11-10T15:20:07.843Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "variTRON300", "vendor": "Jumo", "versions": [{"lessThan": "9.0.2.5", "status": "affected", "version": "0.0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "variTRON500", "vendor": "Jumo", "versions": [{"lessThan": "9.0.2.5", "status": "affected", "version": "0.0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "variTRON500 touch", "vendor": "Jumo", "versions": [{"lessThan": "9.0.2.5", "status": "affected", "version": "0.0.0.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the debug interface is still enabled."}], "value": "A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the debug interface is still enabled."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-338", "description": "CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2025-11-10T07:44:40.644Z"}, "references": [{"url": "https://jumo.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-086.json"}], "source": {"advisory": "VDE-2025-086", "defect": ["CERT@VDE#641857"], "discovery": "UNKNOWN"}, "title": "Jumo: Insufficient entropy in PRNG may lead to root access", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-10T15:18:58.302257Z", "id": "CVE-2025-41731", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-10T15:20:07.843Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-41731", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-11-10T15:18:58.302257Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-10T15:19:02.860Z"}}], "cna": {"title": "Jumo: Insufficient entropy in PRNG may lead to root access", "source": {"defect": ["CERT@VDE#641857"], "advisory": "VDE-2025-086", "discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Jumo", "product": "variTRON300", "versions": [{"status": "affected", "version": "0.0.0.0", "lessThan": "9.0.2.5", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Jumo", "product": "variTRON500", "versions": [{"status": "affected", "version": "0.0.0.0", "lessThan": "9.0.2.5", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Jumo", "product": "variTRON500 touch", "versions": [{"status": "affected", "version": "0.0.0.0", "lessThan": "9.0.2.5", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://jumo.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-086.json"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the debug interface is still enabled.", "supportingMedia": [{"type": "text/html", "value": "A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the debug interface is still enabled.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-338", "description": "CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2025-11-10T07:44:40.644Z"}}}, "cveMetadata": {"cveId": "CVE-2025-41731", "state": "PUBLISHED", "dateUpdated": "2025-11-10T15:20:07.843Z", "dateReserved": "2025-04-16T11:17:48.319Z", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "datePublished": "2025-11-10T07:44:40.644Z", "assignerShortName": "CERTVDE"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "variTRON300", "vendor": "Jumo", "versions": [{"lessThan": "9.0.2.5", "status": "affected", "version": "0.0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "variTRON500", "vendor": "Jumo", "versions": [{"lessThan": "9.0.2.5", "status": "affected", "version": "0.0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "variTRON500 touch", "vendor": "Jumo", "versions": [{"lessThan": "9.0.2.5", "status": "affected", "version": "0.0.0.0", "versionType": "semver"}]}], "source": "info@cert.vde.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the debug interface is still enabled."}, {"lang": "es", "value": "Una vulnerabilidad fue identificada en el algoritmo de generaci\u00f3n de contrase\u00f1as al acceder a la interfaz de depuraci\u00f3n. Un atacante local no autenticado con conocimiento del marco de tiempo de generaci\u00f3n de contrase\u00f1as podr\u00eda ser capaz de forzar la contrase\u00f1a por fuerza bruta de manera oportuna y as\u00ed obtener acceso de root al dispositivo si la interfaz de depuraci\u00f3n todav\u00eda est\u00e1 habilitada."}], "id": "CVE-2025-41731", "lastModified": "2026-10-18T21:10:00.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.4, "impactScore": 5.9, "source": "info@cert.vde.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-41731", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-11-10T15:18:58.302257Z", "version": "2.0.3"}}]}, "published": "2025-11-10T08:15:33.957", "references": [{"source": "info@cert.vde.com", "url": "https://jumo.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-086.json"}], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-338"}], "source": "info@cert.vde.com", "type": "Secondary"}]}

{}

{"created": "2025-11-12T12:50:12.574035+00:00", "updated": "2025-11-12T12:50:12.574061+00:00", "vendors": ["jumo", "jumo$PRODUCT$varitrons300", "jumo$PRODUCT$varitrons500"]}