CVE-2025-41652
The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS probability
- 0.47%
- CWE
- CWE-328
- Published
- 2025-05-27
- Last modified
- 2026-03-12
Affected products
- Weidmueller IE-SW-VL05M-5TX
- Weidmueller IE-SW-VL05MT-5TX
- Weidmueller IE-SW-VL08MT-8TX
- Weidmueller IE-SW-VL08MT-5TX-1SC-2SCS
- Weidmueller IE-SW-VL08MT-6TX-2SC
- Weidmueller IE-SW-VL08MT-6TX-2ST
- Weidmueller IE-SW-VL08MT-6TX-2SCS
- Weidmueller IE-SW-PL10M-3GT-7TX
Weakness type
Related vulnerabilities
- CVE-2026-15605 — wandb Artifact Integrity Validation hashutil.py ArtifactManifestEntry.download weak hash
- CVE-2026-41879 — Weak password hashing in R-SOFT DMS
- CVE-2026-14742 — langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash
- CVE-2026-14738 — exo-explore exo Vision Feature Cache vision.py _image_cache_key weak hash
- CVE-2026-14630 — ForceInjection AI-fundermentals Memory Recall smart_customer_service.py get_conversation_history weak hash
- CVE-2026-10540 — Weak password hash protection in Control-M/Entreprise Manager
- CVE-2026-13455 — PostgreSQL Anonymizer: Unrestricted function can leak the secret salt
- CVE-2026-53692 — Weak hashing algorithm in Redeight CMS