CVE-2025-3200

criticalpriority · track · 0OT risk · elevatedEPSS 0.004 · 29 %ileDEEURU

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.36% (29th) EPSS

CVSS 9.1 · critical

Is it mine?

16 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · wut_psirt

EPSS · scored 2026-10-27

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedwut_psirt
Update the Com-Server firmware to version 1.60.
Mitigationwut_psirt
Access to the WBM should be limited to trustworthy networks or peers.

cvss

Technical severity, 0–10. One row per scoring source.

9.1

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.3–9.1

v3.19.1criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · FSTEC (BDU) RU

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · ENISA EU

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · info@cert.vde.comexploitability 3.9 · impact 5.2

v3.18.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Nsecondary · W&T PSIRT

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-327USCWE-327USCWE-327US

affected products (16)

Products and version ranges known to be affected.

Wiesemann & Theis Com-Server 20mA0.0.0 → 1.60enisa_euvdEU
Wiesemann & Theis Com-Server OEM0.0.0 → 1.60enisa_euvdEU
Wiesemann & Theis Com-Server PoE 3x Isolated0.0.0 → 1.60enisa_euvdEU
Wiesemann & Theis Com-Server UL0.0.0 → 1.60enisa_euvdEU
Wiesemann & Theis Com-Server++0.0.0 → 1.60enisa_euvdEU
Wiesemann & Theis GmbH Com-Server≤ 1.60fstec_bduRU
Firmware 1.60 installed on Com-Server 20mAall versionsfixedwut_psirtDE
Firmware 1.60 installed on Com-Server OEMall versionsfixedwut_psirtDE
Firmware 1.60 installed on Com-Server PoE 3x Isolatedall versionsfixedwut_psirtDE
Firmware 1.60 installed on Com-Server ULall versionsfixedwut_psirtDE
Firmware 1.60 installed on Com-Server++all versionsfixedwut_psirtDE
Firmware <1.60 installed on Com-Server 20mAall versionswut_psirtDE
Firmware <1.60 installed on Com-Server OEMall versionswut_psirtDE
Firmware <1.60 installed on Com-Server PoE 3x Isolatedall versionswut_psirtDE
Firmware <1.60 installed on Com-Server ULall versionswut_psirtDE
Firmware <1.60 installed on Com-Server++all versionswut_psirtDE

advisories (1)

Vendor and ecosystem advisories describing this.

VDE-2025-031Wiesemann & Theis: Multiple products from Wiesemann & Theis support deprecated TLS protocol versions2025-04-28csaf · wut_psirtDE
Com-Server firmware versions prior to 1.60 support the insecure TLS 1.0 and TLS 1.1 protocols, which are susceptible to man-in-the-middle attacks and thereby compromise the confidentiality and integrity of data.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu wut_psirt NVD CVE.org MITRE

published 2025-04-28modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan