CVE-2025-41708CWE-319

CVE-2025-41708

High · published September 8, 2025

CVSS v3.1
7.4
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.6th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2025-09-08T11:15Z
References (1)
https://certvde.com/de/advisories/VDE-2025-084 · [email protected]
EPSS history
Timeline
  • 08 SEP 06:38Z
    Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface
    cvelistv5