Denial-of-Service Vulnerability in Affected Web Server Functionality by Vendor
CVE-2025-41653

7.5HIGH

Key Information:

Vendor

Weidmueller

Status
Ie-sw-vl05m-5tx
Ie-sw-vl05mt-5tx
Ie-sw-vl08mt-8tx
Ie-sw-vl08mt-5tx-1sc-2scs
Vendor
CVE Published:
27 May 2025

What is CVE-2025-41653?

An unauthenticated remote attacker can exploit a vulnerability in the web server functionality of affected products by sending specially crafted HTTP requests with malicious headers. This could result in the server crashing or becoming unresponsive, ultimately leading to a denial of service for legitimate users.

Affected Version(s)

IE-SW-PL10M-3GT-7TX 0.0.0 < 3.3.34

IE-SW-PL10MT-3GT-7TX 0.0.0 < 3.3.34

IE-SW-PL16M-16TX 0.0.0 < 3.4.32

References

https://certvde.com/en/advisories/VDE-2025-044/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.