CVE-2025-41724

—

CVSS 3.1

7.5 high

EPSS

<1%p37

Published

Oct 22, 2025 (Oct 22, 2025)

Modified

Jun 17, 2026

Description

An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again.

Weakness: CWE-239
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.