CVE-2025-41770CWE-770denial-of-service
CVE-2025-41770
High · published August 12, 2026
What it is
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00549 · 45.2th percentile
- Weakness
- CWE-770 · Allocation of Resources Without Limits or Throttling
- Published
- 2026-08-12T12:17Z
References (1)
EPSS history
Timeline