Lenze: PLC Designer V4 with insecure storage of sensitive information
A security vulnerability was discovered in the PLC Designer V4 in the version 4.0.0 where the programmer of a Controller can set a password for the connected device. Here it is possible in an interface of the PLC Designer V4 for the programmer to enter a password for the Device. There is a special constellation where the password entered appears in plain text. Only the display in the tool is affected and not the management of the password on the device. This vulnerability of PLC Designer V4 only occurs in combination with the devices c430 controller, c520 controller and c550 controller and not in combination with other devices, as this functionality is only used here. It is generally recommended that all users update to 4.0.1, but especially all users who operate PLC Designer V4 in combination with the controllers mentioned.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41647US | —OT elevated | — | ||
A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being display… | ||||
references
External citations — patches, advisories, analysis.
- VDE-2025-043: Lenze: PLC Designer V4 with insecure storage of sensitive information - HTMLself
- https://www.lenze.com/en-de/services/cyber-securityexternal
- VDE-2025-043: Lenze: PLC Designer V4 with insecure storage of sensitive information - CSAFself
- Lenze SE Product Security Incident Response Team (PSIRT)external
remediations (2)
- MitigationPLC Designer V4
The PLC Designer V4 tool is designed and developed for use in closed and protected security zones. Lenze therefore strongly recommends that this tool is only used in familiar areas. As this security vulnerability relates to a plain text display of an entered password and not to the password method saved afterwards, it is recommended as mitigation to protect the viewing area of the tool from strangers when entering it in order to prevent the shoulder surfing attack method.
- FixedPLC Designer V4
This vulnerability has been fixed in the new version. All users are strongly recommended to use the new version 4.0.1.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan