rainbutterfly/cve_corpus huggingface dataset:
CVE-2025-41450 Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2
Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2
Problem types: cwe_id: CWE-305
description: CWE-305: Authentication Bypass by Primary Weakness
Affected products: vendor: Danfoss
product: AK-SM 8xxA Series
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H
version: 3.1
Published: 2025-05-08T09:41:20.881Z
CVE-2025-41451 Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series
Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.
Problem types: cwe_id: CWE-77
description: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products: vendor: Danfoss
product: AK-SM8xxA Series
default_status: unaffected
Published: 2025-08-22T02:40:46.216Z
CVE-2025-41452 Post auth nginx configuration injection in Danfoss AK-SM8xxA Series
Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions
Problem types: cwe_id: CWE-15
description: CWE-15: External Control of System or Configuration Setting
Affected products: vendor: Danfoss
product: AK-SM8xxA Series
default_status: unaffected
Published: 2025-08-22T02:40:53.563Z
CVE-2025-41458 Insecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOS
Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem.
Problem types: cwe_id: CWE-312
description: CWE-312 Cleartext Storage of Sensitive Information
Affected products: vendor: Two App Studio
product: Journey
default_status: unknown
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Hannes Allmann (cirosec GmbH) <hannes.allmann@cirosec.de>
Published: 2025-07-21T11:01:13.982Z
CVE-2025-41459 Insecure authentication due to missing bruteforce protection and runtime manipulation in Two App Studio Journey 5.5.6 for iOS
Insufficient protection against brute-force and runtime manipulation in the local authentication component in Two App Studio Journey 5.5.6 on iOS allows local attackers to bypass biometric and PIN-based access control via repeated PIN attempts or dynamic code injection.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: Two App Studio
product: Journey
default_status: unknown
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Hannes Allmann (cirosec GmbH) <hannes.allmann@cirosec.de>
Published: 2025-07-21T11:01:29.417Z
CVE-2025-41645 SMA: Sunny Portal demo system privilege escalation
An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake.
Problem types: cwe_id: CWE-669
description: CWE-669 Incorrect Resource Transfer Between Spheres
Affected products: vendor: SMA
product: www.sunnyportal.com
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.6
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
version: 3.1
Credits: lang: en
value: Jannik Zimmer
Published: 2025-05-13T08:47:33.564Z
CVE-2025-41646 RevPi Webstatus application is vulnerable to an authentication bypass
An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device
Problem types: cwe_id: CWE-704
description: CWE-704 Incorrect Type Conversion or Cast
Affected products: vendor: Kunbus
product: Revolution Pi webstatus
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Ajay Anto
Published: 2025-06-06T14:42:31.249Z
CVE-2025-41647 Lenze: Plaintext Password Disclosure in PLC Designer V4 Interface
A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayed in plain text under special conditions.
Problem types: cwe_id: CWE-312
description: CWE-312 Cleartext Storage of Sensitive Information
Affected products: vendor: Lenze
product: PLC Designer V4
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2025-06-25T09:40:37.325Z
CVE-2025-41648 Pilz: Authentication Bypass in IndustrialPI Webstatus
An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI.
Problem types: cwe_id: CWE-704
description: CWE-704 Incorrect Type Conversion or Cast
Affected products: vendor: Pilz
product: IndustrialPI 4 with IndustrialPI webstatus
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2025-07-01T08:10:24.679Z
CVE-2025-41649 Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches
An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.
Problem types: cwe_id: CWE-787
description: CWE-787 Out-of-bounds Write
Affected products: vendor: Weidmueller
product: IE-SW-VL05M-5TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL05MT-5TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-8TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-5TX-1SC-2SCS
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2SC
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2ST
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2SCS
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL10M-3GT-7TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL10MT-3GT-7TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL16M-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL16MT-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL18M-2GC-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL18MT-2GC-16TX
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2025-05-27T08:37:26.201Z
CVE-2025-41650 Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches
An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.
Problem types: cwe_id: CWE-1287
description: CWE-1287 Improper Validation of Specified Type of Input
Affected products: vendor: Weidmueller
product: IE-SW-VL05M-5TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL05MT-5TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-8TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-5TX-1SC-2SCS
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2SC
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2ST
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2SCS
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL10M-3GT-7TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL10MT-3GT-7TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL16M-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL16MT-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL18M-2GC-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL18MT-2GC-16TX
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2025-05-27T08:37:44.635Z
CVE-2025-41651 Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches
Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Weidmueller
product: IE-SW-VL05M-5TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL05MT-5TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-8TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-5TX-1SC-2SCS
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2SC
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2ST
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2SCS
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL10M-3GT-7TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL10MT-3GT-7TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL16M-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL16MT-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL18M-2GC-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL18MT-2GC-16TX
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2025-05-27T08:38:03.213Z
CVE-2025-41652 Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches
The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.
Problem types: cwe_id: CWE-328
description: CWE-328 Use of Weak Hash
Affected products: vendor: Weidmueller
product: IE-SW-VL05M-5TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL05MT-5TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-8TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-5TX-1SC-2SCS
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2SC
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2ST
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2SCS
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL10M-3GT-7TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL10MT-3GT-7TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL16M-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL16MT-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL18M-2GC-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL18MT-2GC-16TX
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2025-05-27T08:38:12.340Z
CVE-2025-41653 Weidmueller: Denial-of-Service Vulnerability in the web server functionality of Industrial Ethernet Switches
An unauthenticated remote attacker can exploit a denial-of-service vulnerability in the device's web server functionality by sending a specially crafted HTTP request with a malicious header, potentially causing the server to crash or become unresponsive.
Problem types: cwe_id: CWE-410
description: CWE-410 Insufficient Resource Pool
Affected products: vendor: Weidmueller
product: IE-SW-VL05M-5TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL05MT-5TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-8TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-5TX-1SC-2SCS
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2SC
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2ST
default_status: unaffected
vendor: Weidmueller
product: IE-SW-VL08MT-6TX-2SCS
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL10M-3GT-7TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL10MT-3GT-7TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL16M-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL16MT-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL18M-2GC-16TX
default_status: unaffected
vendor: Weidmueller
product: IE-SW-PL18MT-2GC-16TX
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2025-05-27T08:38:29.005Z
CVE-2025-41654 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol
An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Pepperl+Fuchs
product: Profinet Gateway FB8122A.1.EL
default_status: unaffected
vendor: Pepperl+Fuchs
product: Profinet Gateway LB8122A.1.EL
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
version: 3.1
Published: 2025-05-26T08:21:54.033Z
CVE-2025-41655 PEPPERL+FUCHS: Attacker can cause a DoS via URL
An unauthenticated remote attacker can access a URL which causes the device to reboot.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Pepperl+Fuchs
product: Profinet Gateway FB8122A.1.EL
default_status: unaffected
vendor: Pepperl+Fuchs
product: Profinet Gateway LB8122A.1.EL
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2025-05-26T08:22:13.883Z
CVE-2025-41656 Pilz: Missing Authentication in Node-RED integration
An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the Node_RED server is not configured by default.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Pilz
product: IndustrialPI 4 with Firmware Bullseye
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2025-07-01T08:10:06.208Z
CVE-2025-41657 AUMA: Incorrect delivery status of the Bluetooth configuration
Due to an undocumented active bluetooth stack on products delivered within the period 01.01.2024 to 09.05.2025 fingerprinting is possible by an unauthenticated adjacent attacker.
Problem types: cwe_id: CWE-207
description: CWE-207 Observable Behavioral Discrepancy With Equivalent Products
Affected products: vendor: Auma
product: AC1.2
default_status: unaffected
vendor: Auma
product: PROFOX
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2025-06-10T10:46:30.034Z
CVE-2025-41658 CODESYS Toolkit Exposes Sensitive Files via Default Permissions
CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions.
Problem types: cwe_id: CWE-276
description: CWE-276 Incorrect Default Permissions
Affected products: vendor: CODESYS
product: Runtime Toolkit
default_status: unaffected
vendor: CODESYS
product: Control for BeagleBone SL
default_status: unaffected
vendor: CODESYS
product: Control for emPC-A/iMX6 SL
default_status: unaffected
vendor: CODESYS
product: Control for IOT2000 SL
default_status: unaffected
vendor: CODESYS
product: Control for Linux ARM SL
default_status: unaffected
vendor: CODESYS
product: Control for Linux SL
default_status: unaffected
vendor: CODESYS
product: Control for PFC100 SL
default_status: unaffected
vendor: CODESYS
product: Control for PFC200 SL
default_status: unaffected
vendor: CODESYS
product: Control for PLCnext SL
default_status: unaffected
vendor: CODESYS
product: Control for Raspberry Pi SL
default_status: unaffected
vendor: CODESYS
product: Control for WAGO Touch Panels 600 SL
default_status: unaffected
vendor: CODESYS
product: Virtual Control SL
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Luca Borzacchiello from Nozomi Networks
Published: 2025-08-04T08:03:26.511Z
CVE-2025-41659 CODESYS Control PKI Exposure Enables Remote Certificate Access
A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to be extracted or to accept certificates as trusted. Although all services remain available, only unencrypted communication is possible if the certificates are deleted.
Problem types: cwe_id: CWE-732
description: CWE-732 Incorrect Permission Assignment for Critical Resource
Affected products: vendor: CODESYS
product: Control RTE (SL)
default_status: unaffected
vendor: CODESYS
product: Control RTE (for Beckhoff CX) SL
default_status: unaffected
vendor: CODESYS
product: Control Win (SL)
default_status: unaffected
vendor: CODESYS
product: HMI (SL)
default_status: unaffected
vendor: CODESYS
product: Runtime Toolkit
default_status: unaffected
vendor: CODESYS
product: Control for BeagleBone SL
default_status: unaffected
vendor: CODESYS
product: Control for emPC-A/iMX6 SL
default_status: unaffected
vendor: CODESYS
product: Control for IOT2000 SL
default_status: unaffected
vendor: CODESYS
product: Control for Linux ARM SL
default_status: unaffected
vendor: CODESYS
product: Control for Linux SL
default_status: unaffected
vendor: CODESYS
product: Control for PFC100 SL
default_status: unaffected
vendor: CODESYS
product: Control for PFC200 SL
default_status: unaffected
vendor: CODESYS
product: Control for PLCnext SL
default_status: unaffected
vendor: CODESYS
product: Control for Raspberry Pi SL
default_status: unaffected
vendor: CODESYS
product: Control for WAGO Touch Panels 600 SL
default_status: unaffected
vendor: CODESYS
product: Virtual Control SL
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 8.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
version: 3.1
Credits: lang: en
value: Luca Borzacchiello from Nozomi Networks
Published: 2025-08-04T08:04:04.597Z