CVE-2025-41648

published 2025-07-01

CVE-2025-41648: An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available…

Priority P2 66 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
pilz	industrialpi_4_with_industrialpi_webstatus	< 2.4.6	2.4.6

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-704