Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-41709

Command injection in power analyzer via Modbus-TCP and Modbus-RTU

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Janitza UMG 96RM-E 24V(5222063)

Default version status: unaffected

  • 0.0 to ≤ 3.13affected

Janitza UMG 96RM-E 230V(5222062)

Default version status: unaffected

  • 0.0 to ≤ 3.13affected

Weidmueller ENERGY METER 750-230 (2540910000)

Default version status: unaffected

  • 0.0 to ≤ 3.13affected

Weidmueller ENERGY METER 750-24 (2540900000)

Default version status: unaffected

  • 0.0 to ≤ 3.13affected

References