CVE-2025-41651

critical · 9.8

Due to missing authentication on a critical function of the devices an unauthenticated remote attacker can execute arbitrary commands, potentially enabling unauthorized upload or download of configuration files and leading to full system compromise.

9.8

CVSS

0.6%

EPSS (exploit prob.)

47th

EPSS percentile

2025-05-27

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-306

References

https://certvde.com/en/advisories/VDE-2025-044/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-41651