CVE-2025-41713

Published: Sep 15, 2025Modified: Jun 17, 2026Deferred

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Exploitability: 3.9 / Impact: 2.5

Source: info@cert.vde.com (Secondary)

Description

During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.

Related CWEs

CWE-1188

Initialization of a Resource with an Insecure Default

The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (2)

https://certvde.com/en/advisories/VDE-2025-083

Source: info@cert.vde.com

https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-083.json

Source: info@cert.vde.com

Timeline

No history available yet.