CVE-2025-41652 CRITICAL

CVE-2025-41652: Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches

Vendor Weidmueller
Product IE-SW-VL05M-5TX
Weakness CWE-328 · Weak hash
Published May 27, 2025
Last update August 22, 2025

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.

Key dates

02Disclosure timeline

May 27, 2025 CVE published
August 22, 2025 Record updated