CVE-2025-41652: Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches

Vulnerability summary

CVE-2025-41652 is a critical (CVSS 9.8) Use of Weak Hash vulnerability in weidmueller ie-sw-pl10m-3gt-7tx_firmware. EPSS estimates a 0.47% chance of exploitation in the next 30 days, higher than 39.7% of scored vulnerabilities.

Timeline

1. 27-05-2025
   PublishedVulnerability first disclosed.
2. 22-08-2025
   Last modifiedVulnerability information updated.

Description

The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising the device.

• CWE-328Use of Weak HashThe product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack).