Vulnerability · Published Apr 28, 2025 · Assigned by CERTVDE
CVE-2025-3200Com-Server Exposed via Weak TLS
Critical 9.1
In plain English
A critical-severity broken cryptography in Com-Server 20mA from Wiesemann & Theis. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.4%top 69.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Wiesemann & Theis | Com-Server++ | 0.0.0 – before 1.60 |
| Wiesemann & Theis | Com-Server PoE 3x Isolated | 0.0.0 – before 1.60 |
| Wiesemann & Theis | Com-Server 20mA | 0.0.0 – before 1.60 |
| Wiesemann & Theis | Com-Server OEM | 0.0.0 – before 1.60 |
| Wiesemann & Theis | Com-Server UL | 0.0.0 – before 1.60 |
Weakness: CWE-327 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N