CVE-2025-41672 Information
Jul 08, 2025
cve
Description
A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Reference
https://cert.vde.com/en/advisories/VDE-2025-057 https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-057.json
Attack Complexity
LOW
Privileges Required
NONE
User Interaction Required
NONE
Scope
NONE
Confidentiality Impact
CHANGED
Integrity Impact
HIGH
Availability Impact
HIGH
Base Score
HIGH
Base Severity
10.0
Related CNNVD
CNNVD-202507-650 (Published: 2025-07-07)
Share on: