High severity8.8NVD Advisory· Published Nov 18, 2025· Updated Jun 17, 2026

CVE-2025-41735

Description

A low privileged remote attacker can upload any file to an arbitrary location due to missing file check resulting in remote code execution.

LLM-synthesized narrative grounded in this CVE's description and references.

Connect Inc./Energy Controlling Ewio2 Mv5
Range: 0.0.0
Connect Inc./Energy Controlling Ewio2 M Bmv5
Range: 0.0.0
Connect Inc./Ethernet Io Ewio2 Bmv5
Range: 0.0.0
Connect Inc./Ewio2 M Bm Firmware
cpe:2.3:o:metz-connect:ewio2-m-bm_firmware:*:*:*:*:*:*:*:*
Range: <2.2.0
Connect Inc./Ewio2 Bm Firmware
cpe:2.3:o:metz-connect:ewio2-bm_firmware:*:*:*:*:*:*:*:*
Range: <2.2.0
Connect Inc./Ewio2 M Firmware
cpe:2.3:o:metz-connect:ewio2-m_firmware:*:*:*:*:*:*:*:*
Range: <2.2.0

No linked articles in our index yet.