Skip to content
OpenAdvisories
Critical · 9.1 CVE-2025-3200 EUVD-2025-12562GHSA-9mjj-hhq6-4wp3

Com-Server Exposed via Weak TLS

Published Apr 28, 2025 · Updated Apr 28, 2025 · Assigned by CERTVDE

Description

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems.

Affected products

VendorProductAffectedFixed
Wiesemann & Theis Com-Server++ 0.0.0 – < 1.60 1.60
Wiesemann & Theis Com-Server PoE 3x Isolated 0.0.0 – < 1.60 1.60
Wiesemann & Theis Com-Server 20mA 0.0.0 – < 1.60 1.60
Wiesemann & Theis Com-Server OEM 0.0.0 – < 1.60 1.60
Wiesemann & Theis Com-Server UL 0.0.0 – < 1.60 1.60

Advisories 1

References