CVE-2025-41715

Missing Authentication for Database Access in Web Application PUBLISHED

Description (CNA)

The database for the web application is exposed without authentication, allowing an unauthenticated remote attacker to gain unauthorized access and potentially compromise it.

Affected (CNA)

Vendor / product	Versions
WAGO / Device Sphere	affected 0.0.0 before 1.1.0
WAGO / Solution Builder	affected 0.0.0 before 2.3.3

CWE

CWE-306

References

https://certvde.com/de/advisories/VDE-2025-087

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.