PT-2025-23796 · Unknown · Airleader Master

Antonio Kulhanek + 1 · Published 2025-06-04 · Updated 2025-06-04 · CVE-2025-5597

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions airleader MASTER version 3.00571

Description The issue is related to an Improper Authentication vulnerability that allows Authentication Bypass. This vulnerability affects the airleader MASTER device, potentially allowing unauthorized access.

Recommendations For airleader MASTER version 3.00571, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-5597

Affected Products

Airleader Master

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-5597 · Security Note
• https://github.com/migros/migros-security-advisories/blob/main/advisories/msec-2025-003_wf-seuerungstechnik-gmbh_airleader-master_authentication-bypass.md · Note
• https://t.me/cvetracker/25398 · Telegram Post
• https://t.me/cvenotify/124580 · Telegram Post
• https://twitter.com/offseq/status/1930240656095539550 · Twitter Post
• https://twitter.com/CVEnew/status/1930228681680793607 · Twitter Post
• https://twitter.com/CveFindCom/status/1930228120096846153 · Twitter Post