← Database
CVE-2025-41736
HIGH
CVSS: 8.8
Published: 2025-11-18
Modified: 2026-06-17
Description
A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename in php resulting in a remote code execution.
Affected Platforms
Metz-Connect Ewio2-M-BmMetz-Connect Ewio2-BmMetz-Connect Ewio2-MMetz-Connect Ewio2-M FirmwareMetz-Connect Ewio2-Bm FirmwareMetz-Connect Ewio2-M-Bm Firmware
Weakness Type
CWE-35, CWE-22