PT-2025-9793

CVE-2025-1393

·

Published

2025-03-03

·

Updated

2025-03-07

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Weidmueller PROCON-WIN versions prior to 5.7.14.1
Description The issue is related to the use of hard-coded credentials in the PROCON-WIN SCADA system, allowing an unauthenticated remote attacker to gain full administration privileges on the affected product. This can be exploited by using the hard-coded credentials, potentially leading to elevated privileges.
Recommendations For Weidmueller PROCON-WIN versions prior to 5.7.14.1, update to version 5.7.14.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation. Avoid using the hard-coded credentials in the affected product until the issue is resolved.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾