CVE-2025-41704

Published: Oct 14, 2025Modified: Jun 17, 2026Deferred

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: info@cert.vde.com (Secondary)

Description

An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and sub-function code without affecting the core functionality.

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://certvde.com/de/advisories/VDE-2025-072

Source: info@cert.vde.com

http://seclists.org/fulldisclosure/2025/Oct/12

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.