CVE-2025-41689— Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access
Quick assessment
Affected
Wiesemann & Theis Motherbox 3
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Wiesemann & Theis Motherbox 3是德国Wiesemann & Theis公司的一款测量数据集中设备。 Wiesemann & Theis Motherbox 3存在访问控制错误漏洞，该漏洞源于未授权访问控制不当，可能导致数据泄露。
Possible ATT&CK Techniques 1 AI
T1506
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-41689
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access
Source: CVE Program / CVE List V5
Vulnerability Description
An unauthenticated remote attacker can get access without password protection to the affected device. This enables the unprotected read-only access to the stored measurement data.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
Wiesemann & Theis Motherbox 3 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Wiesemann & Theis Motherbox 3是德国Wiesemann & Theis公司的一款测量数据集中设备。 Wiesemann & Theis Motherbox 3存在访问控制错误漏洞，该漏洞源于未授权访问控制不当，可能导致数据泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Wiesemann & Theis | Motherbox 3 | 1.44 ~ 1.48 | - |
|
II. Public POCs for CVE-2025-41689
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-41689
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: Wiesemann & Theis
-
CVE-2025-3020
Wiesemann & Theis: Multiple W&T Products are vulnerable to c -
CVE-2025-3200
Com-Server Exposed via Weak TLS -
CVE-2022-4098
Wiesemann & Theis: Multiple products prone to missing authen -
CVE-2022-42787
Wiesemann & Theis: Small number space for allocating session -
CVE-2022-42786
Wiesemann & Theis: XSS vulnerability in web interface of the
Same weakness: CWE-306
-
CVE-2026-19677
Authentication Bypass Leading to Server-Side Command Executi -
CVE-2026-110825
Kiloview E3 NDI Encoder Missing Authentication for Critical -
CVE-2026-111100
Kiloview E3 NDI Encoder Missing Authentication for Critical -
CVE-2026-83938
Azure Kubernetes Configuration Service Elevation of Privileg -
CVE-2026-13599
ABB Ability Edgenius | Missing Authentication in Edgenius Au
V. Comments for CVE-2025-41689
No comments yet