Home

Description

A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayed in plain text under special conditions.

PUBLISHED Reserved 2025-04-16 | Published 2025-06-25 | Updated 2025-06-25 | Assigner CERTVDE




MEDIUM: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-312 Cleartext Storage of Sensitive Information

Product status

Default status
unaffected

0.0.0 (semver)
affected

References

certvde.com/en/advisories/VDE-2025-043/

cve.org (CVE-2025-41647)

nvd.nist.gov (CVE-2025-41647)

Download JSON