What’s Vulnerable › Vulnerabilities
CVE-2025-41647: Lenze: Plaintext Password Disclosure in PLC Designer V4 Interface
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-06-25 · updated 2026-06-17
- Weakness: CWE-312
Description
A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayed in plain text under special conditions.
Affected products
- Lenze PLC Designer V4: through 4.0.0
References
Get alerted when CVE-2025-41647 or the next vulnerability affects your stack