CVE-2025-41731: Jumo VARITRON300

High severity, CVSS 7.4. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the debug interface is still enabled.

Affected products

• Jumo VARITRON300: from 0.0.0.0, before 9.0.2.5 (fixed in 9.0.2.5)
• Jumo VARITRON500: from 0.0.0.0, before 9.0.2.5 (fixed in 9.0.2.5)
• Jumo VARITRON500 Touch: from 0.0.0.0, before 9.0.2.5 (fixed in 9.0.2.5)

Published 2025-11-10. Last modified 2026-06-17.