VulnerabilityDeferred

CVE-2025-41708

An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.

HIGH 7.4EPSS 0.23%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.23%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.

CVSS 3.1: 7.4 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS: 0.23% probability · 13th percentile
CISA KEV: Not listed
Weakness: CWE-319
Source: info@cert.vde.com

References

https://certvde.com/de/advisories/VDE-2025-084

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.