Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2025-41690

Endress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user (Maintenance) by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive configuration settings and the ability to modify device parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Endress+Hauser Promag 10 with HART

Default version status: unaffected

  • 0 to < 01.00.06affected

Endress+Hauser Promag 10 with IO-Link

Default version status: unaffected

  • 0 to < 01.00.02affected

Endress+Hauser Promag 10 with Modbus

Default version status: unaffected

  • 0 to < 01.00.06affected

Endress+Hauser Promass 10 with HART

Default version status: unaffected

  • 0 to < 01.00.06affected

Endress+Hauser Promass 10 with IO-Link

Default version status: unaffected

  • 0 to < 01.00.02affected

Endress+Hauser Promass 10 with Modbus

Default version status: unaffected

  • 0 to < 01.00.06affected

References