CVEDB API

An unauthenticated remote attacker can execute arbitrary php files and gain full access of the affected devices.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 32.7%

CVSS Severity

CVSS v3 Score 9.8

References

Products affected by CVE-2025-41734

Metz-Connect » Ewio2-Bm » Version: N/A

cpe:2.3:h:metz-connect:ewio2-bm:-
Metz-Connect » Ewio2-M-Bm » Version: N/A

cpe:2.3:h:metz-connect:ewio2-m-bm:-
Metz-Connect » Ewio2-M » Version: N/A

cpe:2.3:h:metz-connect:ewio2-m:-
Metz-Connect » Ewio2-Bm Firmware » Version: Any

cpe:2.3:o:metz-connect:ewio2-bm_firmware:*
Metz-Connect » Ewio2-M-Bm Firmware » Version: Any

cpe:2.3:o:metz-connect:ewio2-m-bm_firmware:*
Metz-Connect » Ewio2-M Firmware » Version: Any

cpe:2.3:o:metz-connect:ewio2-m_firmware:*