« Volver al listado

CVE-2025-41690

Estado: AplazadaAlta (7.4)—

A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user (Maintenance) by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive configuration settings and the ability to modify device parameters.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Ataque local (AV:A) con interacción del usuario (UI:R) que expone contraseñas en el log, permitiendo acceso no autorizado como usuario privilegiado (T1078.001, T1098.002).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Password PoliciesMulti-factor AuthenticationUser TrainingRestrict File and Directory PermissionsPrivileged Account ManagementDisable or Remove Feature or Program

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-41690",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-41690",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-09-02T13:48:53.162675Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "info@cert.vde.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.4,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.5
      }
    ]
  },
  "affected": [
    {
      "source": "info@cert.vde.com",
      "affectedData": [
        {
          "vendor": "Endress+Hauser",
          "product": "Promag 10 with HART",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "01.00.06",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Endress+Hauser",
          "product": "Promag 10 with IO-Link",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "01.00.02",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Endress+Hauser",
          "product": "Promag 10 with Modbus",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "01.00.06",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Endress+Hauser",
          "product": "Promass 10 with HART",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "01.00.06",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Endress+Hauser",
          "product": "Promass 10 with IO-Link",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "01.00.02",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Endress+Hauser",
          "product": "Promass 10 with Modbus",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "01.00.06",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-09-02T08:15:30.583",
  "references": [
    {
      "url": "https://certvde.com/en/advisories/VDE-2025-068",
      "source": "info@cert.vde.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "info@cert.vde.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user (Maintenance) by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive configuration settings and the ability to modify device parameters."
    }
  ],
  "lastModified": "2026-06-17T09:22:57.920",
  "sourceIdentifier": "info@cert.vde.com"
}