← Database

CVE-2025-41734

CRITICAL CVSS: 9.8 Published: 2025-11-18 Modified: 2026-06-17

Description

An unauthenticated remote attacker can execute arbitrary php files and gain full access of the affected devices.

Affected Platforms

Metz-Connect Ewio2-M-BmMetz-Connect Ewio2-BmMetz-Connect Ewio2-MMetz-Connect Ewio2-M FirmwareMetz-Connect Ewio2-Bm FirmwareMetz-Connect Ewio2-M-Bm Firmware

Weakness Type

CWE-98

References