What is the CVSS score of EUVD-2025-19082?

EUVD-2025-19082 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of PLC Designer V4 are affected by EUVD-2025-19082?

Organizations using PLC Designer should be aware of moderate risk from CVE-2025-41647, a cleartext storage vulnerability rated CVSS 5.5.

How to fix or mitigate EUVD-2025-19082?

Within 30 days: Identify affected systems running PLC Designer and apply vendor patches as part of regular patch cycle. Review data exposure and access controls.

PLC Designer V4 EUVD-2025-19082

| CVE-2025-41647 MEDIUM

Cleartext Storage of Sensitive Information (CWE-312)

2025-06-25 info@cert.vde.com

Information Disclosure

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 23:19 euvd

EUVD-2025-19082

Analysis Generated

Mar 15, 2026 - 23:19 vuln.today

CVE Published

Jun 25, 2025 - 10:15 nvd

MEDIUM 5.5

DescriptionCVE.org

A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayed in plain text under special conditions.