← CVE Intelligence

CVE-2025-41737

Improper access control via php endpoint PUBLISHED

Description (CNA)

Due to webserver misconfiguration an unauthenticated remote attacker is able to read the source of php modules.

Affected (CNA)

Vendor / productVersions
METZ CONNECT / Energy-Controlling EWIO2-Maffected 0.0.0 before 2.2.0
METZ CONNECT / Energy-Controlling EWIO2-M-BMaffected 0.0.0 before 2.2.0
METZ CONNECT / Ethernet-IO EWIO2-BMaffected 0.0.0 before 2.2.0

CWE

CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.