CVE-2025-3200

Com-Server Exposed via Weak TLS

State: Published
Severity: 9.1 Critical
Published: Apr 28, 2025
Updated: Apr 28, 2025
Reserved: Apr 3, 2025

Description

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems.

Scores

CVSS	Score	Vector	Source
3.1	9.1 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	CERTVDE

Weaknesses

CWE-327 Use of a Broken or Risky Cryptographic Algorithm

Affected Products

Product	Versions
Com-Server++Wiesemann & Theis	0.0.0 to before 1.60Affected
Com-Server PoE 3x IsolatedWiesemann & Theis	0.0.0 to before 1.60Affected
Com-Server 20mAWiesemann & Theis	0.0.0 to before 1.60Affected
Com-Server OEMWiesemann & Theis	0.0.0 to before 1.60Affected
Com-Server ULWiesemann & Theis	0.0.0 to before 1.60Affected

References

https://certvde.com/en/advisories/VDE-2025-031/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.