CVE-2025-0101

Description

A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work unexpected or stop working at all. Both during runtime and after a restart.

PUBLISHED Reserved 2024-12-19 | Published 2025-04-16 | Updated 2025-04-16 | Assigner CERTVDE

Problem types

CWE-190 Integer Overflow or Wraparound

Product status

Credits

Marcus Kramhöller from Noris Automatio GmbH finder

References

cert.vde.com/en/advisories/VDE-2025-007

cve.org (CVE-2025-0101)

nvd.nist.gov (CVE-2025-0101)

Download JSON