CVE-2025-41705CWE-523

CVE-2025-41705

Medium · published October 14, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

An unauthenticated remote attacker (MITM) can intercept the websocket messages to gain access to the login credentials for the Webfrontend.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00463 · 39.2th percentile
Weakness
CWE-523 · Unprotected Transport of Credentials
Published
2025-10-14T12:15Z
References (2)
https://certvde.com/de/advisories/VDE-2025-072 · [email protected]http://seclists.org/fulldisclosure/2025/Oct/12 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 14 OCT 08:05Z
    Phoenix Contact: WebSocket Message Interception Leaks Webfrontend Credentials
    cvelistv5