CVE-2025-24008CWE-311

A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions)

High · published May 13, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
18.9
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions). The affected devices do not encrypt data in transit. An attacker with network access could eavesdrop the connection and retrieve sensitive information, including obfuscated safety passwords.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00275 · 18.9th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2025-05-13T09:38Z
EPSS history
Timeline
  • 13 MAY 09:38Z
    A vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions), SIRIUS Safety Relays 3SK2 (All versions)
    cvelistv5