An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the Node_RED server is not configured by default.
References
| Link | Resource |
|---|---|
| https://certvde.com/en/advisories/VDE-2025-045 |
Configurations
No configuration.
History
01 Jul 2025, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-01 08:15
Updated : 2025-07-01 08:15
NVD link : CVE-2025-41656
Mitre link : CVE-2025-41656
JSON object : View
Products Affected
No product.
CWE
CWE-306
Missing Authentication for Critical Function