CVE-2025-41708 — Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface
Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensiti…
Published: 2025-09-08 · CVSS: 7.4 · CVSS 3.1
Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7