Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-41647

Lenze: Plaintext Password Disclosure in PLC Designer V4 Interface

Description

A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayed in plain text under special conditions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenze PLC Designer V4

Default version status: unaffected

  • 0.0.0 to ≤ 4.0.0affected

References