CVE-2025-3020

mediumpriority · track · 0EPSS 0.003 · 21 %ileDEEU
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
0.28% (21st) EPSS
CVSS 5.4 · medium
Is it mine?
48 products
Check your exposure
Who says so?
3 sources
cnnvd · enisa_euvd · wut_psirt

EPSS · scored 2026-10-27

An low privileged remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into several fields of the configuration webpage with limited impact.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedwut_psirt

    All products are EoL. For the following products we strongly recommend upgrading the firmware: Web-IO Digital Logger 6xIn upgrade to 3.84, Web-Count 6x Digital upgrade to 3.84, Web-IO Digital 12xIn/12xOut upgrade to 4.08. For the other products there will be no updates available.

  • Mitigationwut_psirt

    Access to the WBM should be limited to trustworthy networks or peers.

02

cvss

Technical severity, 0–10. One row per scoring source.

5.4
010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:Nsecondary · ENISA EU
v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:Nsecondary · info@cert.vde.comexploitability 2.8 · impact 2.5
v3.15mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)
v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:Nsecondary · W&T PSIRT
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-79USCWE-79US
05

affected products (48)

Products and version ranges known to be affected.

showing 20 of 48
06

advisories (1)

Vendor and ecosystem advisories describing this.

  • VDE-2025-032Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site-scripting2025-05-06csaf · wut_psirtDE

    Multiple W&T Products are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via crafted payloads injected into several input fields of the configuration webpage.

07

also known as (3)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdwut_psirtNVDCVE.orgMITRE
published 2025-05-06modified 2026-06-17
09

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan