CVE-2025-41734 — Unauthenticated Local File Inclusion in php module

CVE-2025-41734

Unauthenticated Local File Inclusion in php module PUBLISHED

Description (CNA)

An unauthenticated remote attacker can execute arbitrary php files and gain full access of the affected devices.

Vendor / product	Versions
METZ CONNECT / Energy-Controlling EWIO2-M	affected 0.0.0 before 2.2.0
METZ CONNECT / Energy-Controlling EWIO2-M-BM	affected 0.0.0 before 2.2.0
METZ CONNECT / Ethernet-IO EWIO2-BM	affected 0.0.0 before 2.2.0

CWE-98

CISA-ADP

No English description supplied.

No references supplied.