CVE-2025-41770
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
The PLCnext Engineer communication interface on the device has an unauthenticated denial-of-service vulnerability. A remote attacker can interrupt access via the client application, requiring manual restart of the PLCnext service.
Risk Assessment
The attack can cause device unavailability, disrupting industrial processes and requiring manual intervention to restore operation.
Recommendation
Restrict access to the PLCnext Engineer interface to trusted networks and apply security updates from the manufacturer.
Original NVD description (English source)
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted.