PT-2025-22982 · Weidmueller · Ie-Sw-Pl10M-3Gt-7Tx+12

Published 2025-05-27 · Updated 2025-08-22 · CVE-2025-41652

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-656

CWE-328

Related Identifiers

CVE-2025-41652

Affected Products

Ie-Sw-Pl10M-3Gt-7Tx

Ie-Sw-Pl10Mt-3Gt-7Tx

Ie-Sw-Pl16M-16Tx

Ie-Sw-Pl16Mt-16Tx

Ie-Sw-Pl18M-2Gc-16Tx

Ie-Sw-Pl18Mt-2Gc-16Tx

Ie-Sw-Vl05M-5Tx

Ie-Sw-Vl05Mt-5Tx

Ie-Sw-Vl08Mt-5Tx-1Sc-2Scs

Ie-Sw-Vl08Mt-6Tx-2Sc

Ie-Sw-Vl08Mt-6Tx-2Scs

Ie-Sw-Vl08Mt-6Tx-2St

Ie-Sw-Vl08Mt-8Tx

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2025-41652 · Security Note
• https://twitter.com/CveFindCom/status/1927291319195443393 · Twitter Post
• https://twitter.com/offseq/status/1927341546086555985 · Twitter Post
• https://t.me/cvenotify/123685 · Telegram Post
• https://t.me/latest_high_impact_cve/2471 · Telegram Post
• https://twitter.com/cracbot/status/1929130887159148976 · Twitter Post
• https://twitter.com/CVEnew/status/1927292872430153839 · Twitter Post
• https://certvde.com/en/advisories/VDE-2025-044 · Note
• https://t.me/cvetracker/24716 · Telegram Post
• https://twitter.com/cybercronai/status/1927388465861161011 · Twitter Post
• https://t.me/cveNotify/133160 · Telegram Post