← All advisories

Unrated severityNVD Advisory· Published Nov 18, 2025· Updated Nov 18, 2025

Improper access control via php endpoint

CVE-2025-41737

Description

Due to webserver misconfiguration an unauthenticated remote attacker is able to read the source of php modules.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Connect Inc./Energy Controlling Ewio2 Mv5
Range: 0.0.0
Connect Inc./Energy Controlling Ewio2 M Bmv5
Range: 0.0.0
Connect Inc./Ethernet Io Ewio2 Bmv5
Range: 0.0.0

Patches

Vulnerability mechanics

References

1

certvde.com/de/advisories/VDE-2025-097mitre

News mentions

0

No linked articles in our index yet.