CVE-2025-41684

8.8 highEPSS 0.8%

High (8.8). EPSS 0.8% chance of exploitation in the next 30 days.

An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to lack of improper sanitizing of user input in the Main Web Interface (endpoint tls_iotgen_setting).

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2025-07-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://certvde.com/de/advisories/VDE-2025-052

Check your stack JSON