CVE-2025-41647

Published: Jun 25, 2025Modified: Jun 17, 2026Deferred

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: info@cert.vde.com (Secondary)

Description

A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayed in plain text under special conditions.

Related CWEs

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (1)

https://certvde.com/en/advisories/VDE-2025-043/

Source: info@cert.vde.com

Timeline

No history available yet.