← voltar
CVE-2025-41711

Use of a Broken or Risky Cryptographic Algorithm for firmware images of power analyzer

CVSS 5.3 MEDIUMEPSS 0.3%CWE-327
An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Janitza · UMG 96RM-E 230V(5222062)Janitza · UMG 96RM-E 24V(5222063)Weidmueller · ENERGY METER 750-230 (2540910000)Weidmueller · ENERGY METER 750-24 (2540900000)

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://certvde.com/en/advisories/VDE-2025-079/https://certvde.com/en/advisories/VDE-2025-096/https://janitza.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-079.jsonhttps://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-096.json