9.8
CVSS3.1
CVE-2025-41651 - Weidmueller: Missing Authentication Vulnerability in Industrial Ethernet Switches
Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.
๐
Published: May 27, 2025, 8:38 a.m.
๐ Last Modified: April 15, 2026, 12:35 a.m.
7.5
CVSS3.1
CVE-2025-41650 - Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches
An unauthenticated remote attacker can exploit input validation in cmd services of the devices, allowing them to disrupt system operations and potentially cause a denial-of-service.
๐
Published: May 27, 2025, 8:37 a.m.
๐ Last Modified: April 15, 2026, 12:35 a.m.
7.5
CVSS3.1
CVE-2025-41649 - Weidmueller: Out-of-Bounds Write Vulnerability in Industrial Ethernet Switches
An unauthenticated remote attacker can exploit insufficient input validation to write data beyond the bounds of a buffer, potentially leading to a denial-of-service condition for the devices.
๐
Published: May 27, 2025, 8:37 a.m.
๐ Last Modified: April 15, 2026, 12:35 a.m.
0.0
CVE-2025-48847 -
Not used
๐
Published: May 27, 2025, 8 a.m.
๐ Last Modified: May 28, 2025, 4:15 a.m.
0.0
CVE-2025-48848 -
Not used
๐
Published: May 27, 2025, 8 a.m.
๐ Last Modified: May 28, 2025, 4:15 a.m.
0.0
CVE-2025-48842 -
Not used
๐
Published: May 27, 2025, 8 a.m.
๐ Last Modified: May 28, 2025, 4:15 a.m.
0.0
CVE-2025-48843 -
Not used
๐
Published: May 27, 2025, 8 a.m.
๐ Last Modified: May 28, 2025, 4:15 a.m.
0.0
CVE-2025-48844 -
Not used
๐
Published: May 27, 2025, 8 a.m.
๐ Last Modified: May 28, 2025, 4:15 a.m.
0.0
CVE-2025-48846 -
Not used
๐
Published: May 27, 2025, 8 a.m.
๐ Last Modified: May 28, 2025, 4:15 a.m.
0.0
CVE-2025-48841 -
Not used
๐
Published: May 27, 2025, 8 a.m.
๐ Last Modified: May 28, 2025, 4:15 a.m.
Filters