Authentication Bypass Vulnerability in WF Steuerungstechnik GmbH Airleader MASTER
CVE-2025-5597

10CRITICAL

Key Information:

Vendor

Wf Steuerungstechnik Gmbh

Status
Airleader Master
Vendor
CVE Published:
4 June 2025

What is CVE-2025-5597?

The Airleader MASTER from WF Steuerungstechnik GmbH is susceptible to an improper authentication vulnerability that allows unauthorized access through an authentication bypass. This flaw, identified in version 3.00571, poses a significant risk as it can enable attackers to exploit the system without proper credentials, potentially compromising sensitive data and system integrity.

Affected Version(s)

airleader MASTER 3.00571

airleader MASTER 3.00572

References

https://github.com/migros/migros-security-advisories/blob...

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.