PT-2025-22981 · Weidmueller · Ie-Sw-Pl10M-3Gt-7Tx+12

Published 2025-05-27 · Updated 2025-06-01 · CVE-2025-41651

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description A critical issue allows an unauthenticated remote attacker to execute arbitrary commands due to missing authentication on a critical function of the devices. This could potentially enable unauthorized upload or download of configuration files, leading to full system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-41651

Affected Products

Ie-Sw-Pl10M-3Gt-7Tx

Ie-Sw-Pl10Mt-3Gt-7Tx

Ie-Sw-Pl16M-16Tx

Ie-Sw-Pl16Mt-16Tx

Ie-Sw-Pl18M-2Gc-16Tx

Ie-Sw-Pl18Mt-2Gc-16Tx

Ie-Sw-Vl05M-5Tx

Ie-Sw-Vl05Mt-5Tx

Ie-Sw-Vl08Mt-5Tx-1Sc-2Scs

Ie-Sw-Vl08Mt-6Tx-2Sc

Ie-Sw-Vl08Mt-6Tx-2Scs

Ie-Sw-Vl08Mt-6Tx-2St

Ie-Sw-Vl08Mt-8Tx

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-41651 · Security Note
• https://t.me/latest_high_impact_cve/2471 · Telegram Post
• https://twitter.com/CVEnew/status/1927292873604550765 · Twitter Post
• https://twitter.com/cracbot/status/1929130885237850175 · Twitter Post
• https://twitter.com/cybercronai/status/1927388465861161011 · Twitter Post
• https://t.me/cvenotify/123684 · Telegram Post
• https://t.me/cvetracker/24715 · Telegram Post
• https://twitter.com/CveFindCom/status/1927291386652475501 · Twitter Post
• https://certvde.com/en/advisories/VDE-2025-044 · Note