CVE-2025-41647

Lenze: Plaintext Password Disclosure in PLC Designer V4 Interface PUBLISHED

Description (CNA)

A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayed in plain text under special conditions.

Affected (CNA)

Vendor / product	Versions
Lenze / PLC Designer V4	affected 0.0.0 through 4.0.0

CWE

CWE-312

References

https://certvde.com/en/advisories/VDE-2025-043/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.