What is the CVSS score of CVE-2025-41361?

CVE-2025-41361 has a CVSS 4.0 base score of 8.3 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.1%.

Which versions of TLS are affected by CVE-2025-41361?

CVE-2025-41361 is a high-severity remote code execution vulnerability in IDF (CVSS 8.3) that could allow attackers to execute arbitrary code on affected systems.. A patch is available.

How to fix or mitigate CVE-2025-41361?

Within 24 hours: Identify all systems running IDF and verify current installed versions. Within 7 days: Apply vendor-released patch to all affected IDF installations and validate functionality in non-production environment first. Within 30 days: Complete patching across all production and development infrastructure and document remediation completion.

TLS CVE-2025-41361

EUVD-2025-17139 HIGH

Uncontrolled Resource Consumption (CWE-400)

2025-06-06 cve-coordination@incibe.es

Denial Of Service TLS IoT

8.3

CVSS 4.0

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:45 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

0.10.0-0D00,0.10.0-0C08

EUVD ID Assigned

Mar 14, 2026 - 18:10 euvd

EUVD-2025-17139

Analysis Generated

Mar 14, 2026 - 18:10 vuln.today

CVE Published

Jun 06, 2025 - 12:15 nvd

HIGH 8.3

DescriptionNVD

Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The devices improperly handle TLS requests associated with PROCOME sockets, so TLS requests sent to those PROCOME ports could cause the device to reboot and result in a denial of service. To exploit this vulnerability, PROCOME ports must be configured and active, with communications encryption active.

AnalysisAI

A remote code execution vulnerability in IDF (CVSS 8.3). High severity vulnerability requiring prompt remediation.

Technical ContextAI

CWE-400 (Uncontrolled Resource Consumption). CVSS 8.3 indicates high severity. Affects IDF.

RemediationAI

Monitor vendor channels for patch availability.

CVE-2025-41361 vulnerability details – vuln.today

Back