CVE-2025-41690

HighCVSS 7.4/10Last modified Oct 18, 2026

Description

A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user (Maintenance) by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive configuration settings and the ability to modify device parameters.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published: Sep 2, 2025
Last modified: Oct 18, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-416917.5An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending special CVE-2025-416926.8A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS d CVE-2025-416934.3A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources CVE-2025-416946.5A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it recei CVE-2025-416957.1An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated CVE-2025-416964.6An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 CVE-2025-416976.8An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE CVE-2025-416987.8A low privileged local attacker can interact with the affected service although user-interaction should not be allowed.CVE-2025-416998.8An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command inje CVE-2025-41706.4The Xavin's Review Ratings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xrr' shortcode in all ve CVE-2025-417007.8An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file CVE-2025-417017.8An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with