CVE Catalog

CVE-2025-41769

CriticalCVSS 9.8
Published: Translated: NVD NIST

Summary

The device's PROFINET service is vulnerable to a buffer overflow in the default configuration. An unauthenticated remote attacker could exploit this to reboot the device or execute arbitrary code.

Risk Assessment

The attack can cause device downtime or allow full control, threatening the integrity of industrial processes.

Recommendation

Apply security updates from the device manufacturer and restrict PROFINET access to trusted networks only.

Original NVD description (English source)

The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS