CVE-2025-41647

—

CVSS 3.1

5.5 medium

EPSS

<1%p0

Published

Jun 25, 2025 (Jun 25, 2025)

Modified

Jun 17, 2026

Description

A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayed in plain text under special conditions.

Weakness: CWE-312
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.