Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-41734

Unauthenticated Local File Inclusion in php module

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An unauthenticated remote attacker can execute arbitrary php files and gain full access of the affected devices.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

METZ CONNECT Energy-Controlling EWIO2-M

Default version status: unaffected

  • 0.0.0 to < 2.2.0affected

METZ CONNECT Energy-Controlling EWIO2-M-BM

Default version status: unaffected

  • 0.0.0 to < 2.2.0affected

METZ CONNECT Ethernet-IO EWIO2-BM

Default version status: unaffected

  • 0.0.0 to < 2.2.0affected

References