Base Score

MEDIUM6.8

CVE-2025-41705

An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.

VectorNETWORK

Published Byinfo@cert.vde.com

Published DateOct 14, 2025, 08:15

Weakness Type (CWE):CWE-523

CVSS Metrics

Base Score

6.8

Vector String

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

HIGH

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

NONE

References

https://certvde.com/de/advisories/VDE-2025-072
http://seclists.org/fulldisclosure/2025/Oct/12

Base Score

MEDIUM6.8

Weakness Type (CWE):CWE-523

CVSS Metrics

Base Score

6.8

Vector String

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

HIGH

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

NONE