How severe is CVE-2025-1445?

CVE-2025-1445 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2025-1445 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (23rd percentile), an estimate of the probability of exploitation in the next 30 days.

How do I fix CVE-2025-1445?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

Does CVE-2025-1445 have an EU (EUVD) identifier?

Yes. CVE-2025-1445 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-15123.

When was CVE-2025-1445 published?

CVE-2025-1445 was published on 2025-03-25 and last updated on 2026-06-17.

CVE-2025-1445

CVE-2025-1445 is a high-severity vulnerability with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-820.

Key facts

Severity: High (CVSS 3.x base score 7.5)
CVSS v4: 8.7
EPSS exploit prediction: 0% (23rd percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-15123
Weakness: CWE-820
Published: 2025-03-25
Last modified: 2026-06-17

Description

A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active. Precondition is that IEC61850 as client or server are configured using TLS on RTU500 device. It affects the CMU the IEC61850 stack is configured on.

Frequently asked questions

What is CVE-2025-1445?: A vulnerability exists in RTU IEC 61850 client and server functionality that could impact the availability if renegotiation of an open IEC61850 TLS connection takes place in specific timing situations, when IEC61850 communication is active. Precondition is that IEC61850 as client or server are configured using TLS on RTU500 device. It affects the CMU the IEC61850 stack is configured on.
How severe is CVE-2025-1445?: CVE-2025-1445 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2025-1445 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (23rd percentile), an estimate of the probability of exploitation in the next 30 days.
How do I fix CVE-2025-1445?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2025-1445 have an EU (EUVD) identifier?: Yes. CVE-2025-1445 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-15123.
When was CVE-2025-1445 published?: CVE-2025-1445 was published on 2025-03-25 and last updated on 2026-06-17.

References

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000207&languageCode=en&Preview=true

Other CWE-820 vulnerabilities

CVE-2025-47154 — Critical (CVSS 9.0): LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list references, leading to a…
CVE-2026-53153 — High (CVSS 7.8): In the Linux kernel, the following vulnerability has been resolved: mm/list_lru: drain before clearing xarray entry on…
CVE-2026-22163 — High (CVSS 7.8): Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an…
CVE-2024-49114 — High (CVSS 7.8): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2022-50238 — High (CVSS 7.4): The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended…
CVE-2025-49751 — Medium (CVSS 6.8): Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

Browse all CWE-820 vulnerabilities →