VulnerabilityDeferred

CVE-2024-41975

An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.

MEDIUM 5.3EPSS 0.43%

Does this matter?

Lower severity and a low EPSS score (0.43%). Track it; it rarely justifies an emergency change on its own.

Description

An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS: 0.43% probability · 37th percentile
CISA KEV: Not listed
Weakness: CWE-1188
Source: info@cert.vde.com

References

https://cert.vde.com/en/advisories/VDE-2025-013

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.