Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-41715

Missing Authentication for Database Access in Web Application

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

The database for the web application is exposed without authentication, allowing an unauthenticated remote attacker to gain unauthorized access and potentially compromise it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO Device Sphere

Default version status: unaffected

  • 0.0.0 to < 1.1.0affected

WAGO Solution Builder

Default version status: unaffected

  • 0.0.0 to < 2.3.3affected

References