CVE-2025-1393CWE-798

Weidmueller: Authentication Vulnerability due to Hard-coded Credentials

Critical · published March 5, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
46.0
In the wild
Unconfirmed
What it is

🚨 An attacker can waltz right in with hard-coded credentials, gaining full admin access with zero authentication! 🔥 Think of it like a hotel where anyone can use a universal master key to enter any room without checking in — utterly disastrous for privacy! With full administrative powers, an attacker could change settings, steal sensitive data, or even cause complete chaos in the system. This vulnerability could lead to devastating breaches that compromise not just one, but potentially entire networks and systems!

Put simply

Think of it like a hotel where anyone can use a universal master key to enter any room without checking in — utterly disastrous for privacy! This CVE allows unauthenticated remote attackers to leverage hard-coded credentials embedded in the software, immediately granting them administrator privileges without needing to prove their identity.

What to do

With full administrative powers, an attacker could change settings, steal sensitive data, or even cause complete chaos in the system. This vulnerability could lead to devastating breaches that compromise not just one, but potentially entire networks and systems! Immediately update to the latest version of the software where this vulnerability has been patched. Additionally, review your configurations to ensure that no hard-coded credentials are left in your codebase. Implement a regular audit to avoid such critical oversights in the future. You've got this! Follow these steps and secure your systems — you’re on your way to security hero status! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00562 · 46.0th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-03-05T08:03Z
EPSS history
Timeline
  • 05 MAR 08:03Z
    Weidmueller: Authentication Vulnerability due to Hard-coded Credentials
    cvelistv5