CVE-2025-41654 PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by information disclosure via the SNMP protocol
Unauthenticated attackers can read process information via SNMP, potentially causing a device reboot due to data volume.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-41654?
CVE-2025-41654 is a high-severity vulnerability in Pepperl+Fuchs Profinet Gateway FB8122A.1.EL, published on 26 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An unauthenticated remote attacker can access information about running processes via the SNMP protocol. The amount of returned data can trigger a reboot by the watchdog.
Weakness: CWE-306
Which versions are affected by CVE-2025-41654?
How do I fix CVE-2025-41654?
No fix has been published for CVE-2025-41654 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-41654 being exploited?
There is no known exploitation of CVE-2025-41654 in the wild and no public exploit code.
Sources
Also known as GHSA-jxgq-qhvg-x244.