CVE-2025-48466

Modbus Command Injection without Authentication

High · published June 24, 2025

CVSS v3.1
8.1
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00557 · 45.7th percentile
Published
2025-06-24T02:12Z
EPSS history
Timeline
  • 24 JUN 02:12Z
    Modbus Command Injection without Authentication
    cvelistv5