CVE-2025-11566CWE-307

CVE-2025-11566

published November 12, 2025

CVSS
6.9
EPSS
0%
Percentile
38.0
In the wild
Unconfirmed
What it is

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by performing an arbitrary number of authentication attempts with different credentials on the /REST/shutdownnow endpoint.

The record
Technical detail
CVSS
6.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.00448 · 38.0th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2025-11-12T19:15Z
References (1)
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-315-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-315-01.pdf · [email protected]
EPSS history
Timeline
  • 12 NOV 13:26Z
    CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the…
    cvelistv5