CVE-2025-41648

Pilz: Authentication Bypass in IndustrialPI Webstatus PUBLISHED

Description (CNA)

An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI.

Affected (CNA)

Vendor / product	Versions
Pilz / IndustrialPI 4 with IndustrialPI webstatus	affected 0 before 2.4.6

CWE

CWE-704

References

https://certvde.com/en/advisories/VDE-2025-039

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.