CVE-2025-5597 - WF Steuerungstechnik GmbH - airleader MASTER

Back Back to CVE browser

CRITICAL

WF Steuerungstechnik GmbH - airleader MASTER - Authentication Bypass

Published Jun 4, 2025

10.0

CRITICAL

CVSS 4.0

EPSS 0.41%

Description

Improper Authentication vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Authentication Bypass.This issue affects airleader MASTER: 3.00571.

Affected products

Vendor WF Steuerungstechnik GmbH Product airleader MASTER Default
unaffected
- Version
  3.00571
  Status
  affected
  Constraints
  -
- Version
  3.00572
  Status
  unaffected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

WF Steuerungstechnik GmbH

airleader MASTER

unaffected

Version	Status	Constraints
3.00571	affected	-
3.00572	unaffected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16865		Advisory
https://github.com/migros/migros-security-advisories/blob/main/advisories/msec-2025-003_wf-seuerungstechnik-gmbh_airleader-master_authentication-bypass.md