Critical severity9.8NVD Advisory· Published Nov 18, 2025· Updated Jun 17, 2026

CVE-2025-41734

Description

An unauthenticated remote attacker can execute arbitrary php files and gain full access of the affected devices.

LLM-synthesized narrative grounded in this CVE's description and references.

Connect Inc./Energy Controlling Ewio2 Mv5
Range: 0.0.0
Connect Inc./Energy Controlling Ewio2 M Bmv5
Range: 0.0.0
Connect Inc./Ethernet Io Ewio2 Bmv5
Range: 0.0.0
Connect Inc./Ewio2 M Firmware
cpe:2.3:o:metz-connect:ewio2-m_firmware:*:*:*:*:*:*:*:*
Range: <2.2.0
Connect Inc./Ewio2 M Bm Firmware
cpe:2.3:o:metz-connect:ewio2-m-bm_firmware:*:*:*:*:*:*:*:*
Range: <2.2.0
Connect Inc./Ewio2 Bm Firmware
cpe:2.3:o:metz-connect:ewio2-bm_firmware:*:*:*:*:*:*:*:*
Range: <2.2.0

No linked articles in our index yet.