CVE-2025-41690: Endress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditions

Severity: high (CVSS 7.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-02 · updated 2026-10-18
Weakness: CWE-532

Description

A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user (Maintenance) by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive configuration settings and the ability to modify device parameters.

Affected products

Endress+Hauser Promag 10 with HART: before 01.00.06 — fixed in 01.00.06
Endress+Hauser Promag 10 with IO-Link: before 01.00.02 — fixed in 01.00.02
Endress+Hauser Promag 10 with Modbus: before 01.00.06 — fixed in 01.00.06
Endress+Hauser Promass 10 with HART: before 01.00.06 — fixed in 01.00.06
Endress+Hauser Promass 10 with IO-Link: before 01.00.02 — fixed in 01.00.02
Endress+Hauser Promass 10 with Modbus: before 01.00.06 — fixed in 01.00.06

How to fix

Upgrade to a fixed version: Endress+Hauser Promag 10 with HART 01.00.06; Endress+Hauser Promag 10 with IO-Link 01.00.02; Endress+Hauser Promag 10 with Modbus 01.00.06; Endress+Hauser Promass 10 with HART 01.00.06; Endress+Hauser Promass 10 with IO-Link 01.00.02; Endress+Hauser Promass 10 with Modbus 01.00.06. Check the vendor advisory for mitigations.

References

https://certvde.com/en/advisories/VDE-2025-068

Get alerted when CVE-2025-41690 or the next vulnerability affects your stack