Endress+Hauser Proline/Promass 10 Privilege Escalation Vulnerability (CVE-2025-41600)

Critical Vulnerability Information Vulnerability Overview ID: VDE-2025-068 Release Date: 2025-09-02 10:00 (CEST) Last Updated: 2025-09-01 09:58 (CEST) Vendor: Endress+Hauser AG Affected Products and Versions: - Promag 10 with HART: < 01.00.06 - Promag 10 with IO-Link: < 01.00.02 - Promag 10 with Modbus: < 01.00.06 - Promass 10 with HART: < 01.00.06 - Promass 10 with IO-Link: < 01.00.02 - Promass 10 with Modbus: < 01.00.06 Vulnerability Details CVE ID: CVE-2025-41600 Severity: 7.4 (CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Weakness Type: Insertion of Sensitive Information into Log Files (CWE-532) Summary: A privilege escalation vulnerability has been identified in Endress+Hauser’s Proline 10 devices. This vulnerability allows an authenticated user with operator-level access to escalate privileges and gain maintenance-level access, potentially enabling unauthorized configuration changes. Impact: Successful exploitation of this vulnerability may allow an attacker to perform vertical privilege escalation, gaining unauthorized access to maintenance-level functions. Attackers could: - Modify all maintenance parameters - Change device settings - Trigger device reset, potentially causing operational downtime - Restore the device to factory default settings - Reconfigure non-critical diagnostic parameters - Disable Bluetooth communication - Alter the 4-20 mA analog output range Solutions and Mitigations Mitigation: If immediate firmware update is not feasible, it is recommended to disable Bluetooth communication on the device when not in use. This significantly reduces the risk of unauthorized access by eliminating a key attack vector. Fix: Endress+Hauser has released updated firmware versions to address this vulnerability. Customers should update their devices to the latest firmware version as soon as possible. For assistance with the update process, contact your local Endress+Hauser service center. Reporter CERT@VDE in coordination with Endress+Hauser

Goal Reached Thanks to every supporter — we hit 100%!

Endress+Hauser Proline/Promass 10 Privilege Escalation Vulnerability (CVE-2025-41600)