rainbutterfly/cve_corpus huggingface dataset:
CVE-2025-41682 Credential Disclosure via Insecure Storage on Charge Controller
An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password.
Problem types: cwe_id: CWE-522
description: CWE-522 Insufficiently Protected Credentials
Affected products: vendor: Bender
product: CC612
default_status: unaffected
vendor: Bender
product: CC613
default_status: unaffected
vendor: Bender
product: ICC16xx
default_status: unaffected
vendor: Bender
product: ICC13xx
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Dr. Matthias Kesenheimer by SySS GmbH
lang: en
value: Sebastian Hamann by SySS GmbH
Published: 2025-09-08T06:38:31.579Z
CVE-2025-41683 Weidmueller: Root Command Injection via Unsanitized Input in event_mail_test Endpoint
An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint event_mail_test).
Problem types: cwe_id: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Weidmueller
product: IE-SR-2TX-WL
default_status: unaffected
vendor: Weidmueller
product: IE-SR-2TX-WL-4G-EU
default_status: unaffected
vendor: Weidmueller
product: IE-SR-2TX-WL-4G-US-V
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Reid Wightman of Dragos Inc.
Published: 2025-07-23T08:22:48.380Z
CVE-2025-41684 Weidmueller: Root Command Injection via Unsanitized Input in tls_iotgen_setting Endpoint
An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint tls_iotgen_setting).
Problem types: cwe_id: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: Weidmueller
product: IE-SR-2TX-WL
default_status: unaffected
vendor: Weidmueller
product: IE-SR-2TX-WL-4G-EU
default_status: unaffected
vendor: Weidmueller
product: IE-SR-2TX-WL-4G-US-V
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Reid Wightman of Dragos Inc.
Published: 2025-07-23T08:23:28.046Z
CVE-2025-41685 SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user
A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address.
Problem types: cwe_id: CWE-359
description: CWE-359 Exposure of Private Personal Information to an Unauthorized Actor
Affected products: vendor: SMA
product: ennexos.sunnyportal.com
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Jannik Zimmer
Published: 2025-08-19T08:10:05.103Z
CVE-2025-41686 Improper File Permissions Allow Local Privilege Escalation
A low-privileged local attacker can exploit improper permissions on nssm.exe to escalate their privileges and gain administrative access.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Phoenix Contact
product: DaUM
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2025-08-12T07:37:01.370Z
CVE-2025-41687 Weidmueller: Unauthenticated Stack-Based Buffer Overflow in u-link Management API
An unauthenticated remote attacker may use a stack based buffer overflow in the u-link Management API to gain full access on the affected devices.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Weidmueller
product: IE-SR-2TX-WL
default_status: unaffected
vendor: Weidmueller
product: IE-SR-2TX-WL-4G-EU
default_status: unaffected
vendor: Weidmueller
product: IE-SR-2TX-WL-4G-US-V
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Reid Wightman of Dragos Inc.
Published: 2025-07-23T08:23:52.447Z
CVE-2025-41688 High Privilege RCE via LUA Sandbox Escape
A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox.
Problem types: cwe_id: CWE-653
description: CWE-653 Improper Isolation or Compartmentalization
Affected products: vendor: MB connect line
product: mbNET HW1
default_status: unaffected
vendor: MB connect line
product: mbNET/mbNET.rokey
default_status: unaffected
vendor: Helmholz
product: REX 300
default_status: unaffected
vendor: Helmholz
product: REX 200/250
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Marcel Rick-Cen
Published: 2025-07-31T10:02:49.655Z
CVE-2025-41689 Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access
An unauthenticated remote attacker can get access without password protection to the affected device. This enables the unprotected read-only access to the stored measurement data.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Wiesemann & Theis
product: Motherbox 3
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2025-08-19T08:07:01.652Z
CVE-2025-41690 Endress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditions
A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user (Maintenance) by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive configuration settings and the ability to modify device parameters.
Problem types: cwe_id: CWE-532
description: CWE-532 Insertion of Sensitive Information into Log File
Affected products: vendor: Endress+Hauser
product: Promag 10 with HART
default_status: unaffected
vendor: Endress+Hauser
product: Promag 10 with IO-Link
default_status: unaffected
vendor: Endress+Hauser
product: Promag 10 with Modbus
default_status: unaffected
vendor: Endress+Hauser
product: Promass 10 with HART
default_status: unaffected
vendor: Endress+Hauser
product: Promass 10 with IO-Link
default_status: unaffected
vendor: Endress+Hauser
product: Promass 10 with Modbus
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2025-09-02T08:12:13.946Z
CVE-2025-41691 CODESYS Control DoS via Unauthenticated NULL Pointer Dereference
An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, potentially leading to a denial-of-service (DoS) condition.
Problem types: cwe_id: CWE-476
description: CWE-476 NULL Pointer Dereference
Affected products: vendor: CODESYS
product: Control RTE (SL)
default_status: unaffected
vendor: CODESYS
product: Control RTE (for Beckhoff CX) SL
default_status: unaffected
vendor: CODESYS
product: Control Win (SL)
default_status: unaffected
vendor: CODESYS
product: HMI (SL)
default_status: unaffected
vendor: CODESYS
product: Control for BeagleBone SL
default_status: unaffected
vendor: CODESYS
product: Control for emPC-A/iMX6 SL
default_status: unaffected
vendor: CODESYS
product: Control for IOT2000 SL
default_status: unaffected
vendor: CODESYS
product: Control for Linux ARM SL
default_status: unaffected
vendor: CODESYS
product: Control for Linux SL
default_status: unaffected
vendor: CODESYS
product: Control for PFC100 SL
default_status: unaffected
vendor: CODESYS
product: Control for PFC200 SL
default_status: unaffected
vendor: CODESYS
product: Control for PLCnext SL
default_status: unaffected
vendor: CODESYS
product: Control for Raspberry Pi SL
default_status: unaffected
vendor: CODESYS
product: Control for WAGO Touch Panels 600 SL
default_status: unaffected
vendor: CODESYS
product: Virtual Control SL
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2025-08-04T08:04:34.981Z
CVE-2025-41698 Draeger: ICMHelper is vulnerable to a privilege escalation due too missing authorization
A low privileged local attacker can interact with the affected service although user-interaction should not be allowed.
Problem types: cwe_id: CWE-862
description: CWE-862 Missing Authorization
Affected products: vendor: Draeger
product: Draeger ICMHelper
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: CODE WHITE GmbH
Published: 2025-08-05T08:06:08.584Z
CVE-2025-41699 Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers
An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total loss of confidentiality, availability and integrity due to improper control of generation of code ('Code Injection').
Problem types: cwe_id: CWE-94
description: CWE-94 Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: Phoenix Contact
product: CHARX SEC-3150
default_status: unaffected
vendor: Phoenix Contact
product: CHARX SEC-3100
default_status: unaffected
vendor: Phoenix Contact
product: CHARX SEC-3050
default_status: unaffected
vendor: Phoenix Contact
product: CHARX SEC-3000
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Ryo Kato of Panasonic Holdings Corporation
Published: 2025-10-14T08:35:05.215Z
CVE-2025-41700 CODESYS Development System - Deserialization of Untrusted Data
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: CODESYS
product: CODESYS Development System
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: MengyuXia from Beijing Aerospace Wanyuan Science & Technology Co, Ltd.
Published: 2025-12-01T10:02:47.312Z
CVE-2025-41701 Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering
An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with an affected engineering tool. These arbitrary commands are executed in the user context.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: Beckhoff
product: TE1000 | TwinCAT 3 Enineering
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Peter Cheng
lang: en
value: ELEX FEIGONG RESEARCH INSTITUTE of Elex CyberSecurity, Inc.
Published: 2025-09-09T08:57:28.132Z
CVE-2025-41702 egOS WebGUI Hard-Coded JWT Secret Enables Authentication Bypass
The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key.
Problem types: cwe_id: CWE-321
description: CWE-321 Use of Hard-coded Cryptographic Key
Affected products: vendor: Welotec
product: EG400Mk2-D11001-000101
default_status: unaffected
vendor: Welotec
product: EG400Mk2-D11101-000101
default_status: unaffected
vendor: Welotec
product: EG503W
default_status: unaffected
vendor: Welotec
product: EG503L
default_status: unaffected
vendor: Welotec
product: EG503W_4GB
default_status: unaffected
vendor: Welotec
product: EG503L_4GB
default_status: unaffected
vendor: Welotec
product: EG503L-G
default_status: unaffected
vendor: Welotec
product: EG500Mk2-A11101-000101
default_status: unaffected
vendor: Welotec
product: EG500Mk2-A11001-000101
default_status: unaffected
vendor: Welotec
product: EG500Mk2-B11101-000101
default_status: unaffected
vendor: Welotec
product: EG500Mk2-B11001-000101
default_status: unaffected
vendor: Welotec
product: EG500Mk2-C11101-000101
default_status: unaffected
vendor: Welotec
product: EG500Mk2-C11001-000101
default_status: unaffected
vendor: Welotec
product: EG500Mk2-A12011-000101
default_status: unaffected
vendor: Welotec
product: EG500Mk2-A11001-000201
default_status: unaffected
vendor: Welotec
product: EG500Mk2-A21101-000101
default_status: unaffected
vendor: Welotec
product: EG602W
default_status: unaffected
vendor: Welotec
product: EG602L
default_status: unaffected
vendor: Welotec
product: EG603W Mk2
default_status: unaffected
vendor: Welotec
product: EG603L Mk2
default_status: unaffected
vendor: Welotec
product: EG802W
default_status: unaffected
vendor: Welotec
product: EG804W
default_status: unaffected
vendor: Welotec
product: EG802W_i7_512GB_DinRail
default_status: unaffected
vendor: Welotec
product: EG802W_i7_512GB_w/o DinRail
default_status: unaffected
vendor: Welotec
product: EG804W Pro
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2025-08-26T06:10:57.464Z
CVE-2025-41703 Phoenix Contact: UPS Shutdown via Unauthenticated Modbus Command
An unauthenticated remote attacker can cause a Denial of Service by turning off the output of the UPS via Modbus command.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/5/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/10/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/20/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/40/EIP
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: D. Blagojevic, S. Dietz, F. Koroknai, T. Weber from CyberDanube Security Research
Published: 2025-10-14T08:05:23.395Z
CVE-2025-41704 Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code
An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and sub-function code without affecting the core functionality.
Problem types: cwe_id: CWE-770
description: CWE-770 Allocation of Resources Without Limits or Throttling
Affected products: vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/5/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/10/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/20/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/40/EIP
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: D. Blagojevic, S. Dietz, F. Koroknai, T. Weber from CyberDanube Security Research
Published: 2025-10-14T08:05:34.171Z
CVE-2025-41705 Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials
An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.
Problem types: cwe_id: CWE-523
description: CWE-523 Unprotected Transport of Credentials
Affected products: vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/5/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/10/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/20/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/40/EIP
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: D. Blagojevic, S. Dietz, F. Koroknai, T. Weber from CyberDanube Security Research
Published: 2025-10-14T08:05:43.031Z
CVE-2025-41706 Phoenix Contact: Webserver Denial of Service through Malformed Content-Length
The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/5/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/10/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/20/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/40/EIP
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: D. Blagojevic, S. Dietz, F. Koroknai, T. Weber from CyberDanube Security Research
Published: 2025-10-14T08:05:56.266Z
CVE-2025-41707 Phoenix Contact: WebSocket Handler Denial of Service
The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality.
Problem types: cwe_id: CWE-120
description: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/5/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/10/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/20/EIP
default_status: unaffected
vendor: Phoenix Contact
product: QUINT4-UPS/24DC/24DC/40/EIP
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Credits: lang: en
value: D. Blagojevic, S. Dietz, F. Koroknai, T. Weber from CyberDanube Security Research
Published: 2025-10-14T08:06:11.424Z
CVE-2025-41708 Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface
Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.
Problem types: cwe_id: CWE-319
description: CWE-319 Cleartext Transmission of Sensitive Information
Affected products: vendor: Bender
product: CC612
default_status: unaffected
vendor: Bender
product: CC613
default_status: unaffected
vendor: Bender
product: ICC15xx
default_status: unaffected
vendor: Bender
product: ICC16xx
default_status: unaffected
vendor: Bender
product: ICC13xx
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: Dr. Matthias Kesenheimer by SySS GmbH
lang: en
value: Sebastian Hamann by SySS GmbH
Published: 2025-09-08T06:38:50.386Z