CVE-2025-7741 is a vulnerability in CENTUM VP versions R5.01.00 to R5.04.20, R6.01.00 to R6.12.00, and R7.01.00 where a hardcoded password exists for the PROG user account used in CENTUM Authentication Mode. An attacker must obtain the hardcoded password and have direct or remote access to the HIS screen controls configured in CTM authentication mode to exploit this issue. The PROG user has default S1 (OFFUSER equivalent) permissions, limiting the potential impact under default configurations. The vulnerability requires high attack complexity and physical or remote access with privileges to operate the HIS screen, resulting in a low overall severity score.

If exploited, an attacker could log in as the PROG user with limited permissions (S1/OFFUSER), which restricts critical operations or configuration changes under default settings. However, if the PROG user's permissions have been altered, the attacker could potentially perform more impactful operations. Exploitation requires prior access to HIS screen controls, meaning the attacker already has some operational capabilities. Overall, the risk of critical impact is low given the default permission level and required conditions for exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should verify if updates or configuration changes are available from Yokogawa Electric Corporation. Restricting access to HIS screen controls and ensuring PROG user permissions remain at default levels can reduce risk. Monitor vendor communications for any forthcoming patches or mitigation instructions.