← Database

CVE-2025-41735

HIGH CVSS: 8.8 Published: 2025-11-18 Modified: 2026-06-17

Description

A low privileged remote attacker can upload any file to an arbitrary location due to missing file check resulting in remote code execution.

Affected Platforms

Metz-Connect Ewio2-M-BmMetz-Connect Ewio2-BmMetz-Connect Ewio2-MMetz-Connect Ewio2-M FirmwareMetz-Connect Ewio2-Bm FirmwareMetz-Connect Ewio2-M-Bm Firmware

Weakness Type

CWE-434

References