CVE-2025-41736 — Vulnerability intelligence
metz-connect — ewio2-m firmware
Published:
- CVSS
- 8.8
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename in php resulting in a remote code execution.