Vulnerability Description
An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result of incorrect permission assignment for the web server.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://certvde.com/en/advisories/VDE-2025-079/
- https://certvde.com/en/advisories/VDE-2025-096/
- https://janitza.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-079.jso
- https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-096
FAQ
What is CVE-2025-41712?
CVE-2025-41712 is a vulnerability with a CVSS score of 6.5 (MEDIUM). An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result of incorrect permission assignment for th...
How severe is CVE-2025-41712?
CVE-2025-41712 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-41712?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.