Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-41737

Improper access control via php endpoint

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Due to webserver misconfiguration an unauthenticated remote attacker is able to read the source of php modules.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

METZ CONNECT Energy-Controlling EWIO2-M

Default version status: unaffected

  • 0.0.0 to < 2.2.0affected

METZ CONNECT Energy-Controlling EWIO2-M-BM

Default version status: unaffected

  • 0.0.0 to < 2.2.0affected

METZ CONNECT Ethernet-IO EWIO2-BM

Default version status: unaffected

  • 0.0.0 to < 2.2.0affected

References