Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayed in plain text under special conditions.

CVE-2025-41647 is a medium-severity vulnerability affecting Lenze's PLC Designer V4 software, specifically related to the cleartext storage and display of sensitive information. The vulnerability arises from an incorrect implementation in the software that causes the password of the connected programmable logic controller (PLC) to be displayed in plain text under certain conditions. This flaw allows a local attacker with low privileges on the system running PLC Designer V4 to extract the controller's password without requiring user interaction. The vulnerability is classified under CWE-312, which pertains to the cleartext storage of sensitive information. The CVSS v3.1 base score is 5.5, reflecting a medium impact primarily on confidentiality, with no impact on integrity or availability. The attack vector is local (AV:L), requiring low privileges (PR:L), no user interaction (UI:N), and the scope remains unchanged (S:U). This means an attacker must have some level of access to the host machine but does not need elevated privileges or social engineering to exploit the flaw. The vulnerability does not currently have any known exploits in the wild, and no patches have been published at the time of analysis. The affected product, PLC Designer V4, is used for programming and configuring Lenze PLCs, which are industrial control devices commonly deployed in manufacturing and automation environments. The exposure of controller passwords can lead to unauthorized access to industrial control systems, potentially compromising operational security and safety. Since the password is revealed only under special conditions, exploitation may require specific steps or knowledge of the software's behavior, but the lack of user interaction and low privilege requirements lower the barrier for exploitation once local access is obtained.

Detailed information about CVE-2025-41647: CWE-312 Cleartext Storage of Sensitive Information in Lenze PLC Designer V4 affecting Lenze PLC Designer V4. Get real

CVE-2025-41647: CWE-312 Cleartext Storage of Sensitive Information in Lenze PLC Designer V4 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-41647: CWE-312 Cleartext Storage of Sensitive Information in Lenze PLC Designer V4

Threats Tagged 'cve-2025-41647'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-41647'

Lead Pen Test Professional