high8.8
CVE-2025-41735
A low privileged remote attacker can upload any file to an arbitrary location due to missing file check resulting in remote code execution.
Impact
A low privileged remote attacker can upload any file to an arbitrary location due to missing file check resulting in remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Metz-Connect | Ewio2-M Firmware | before 2.2.0 |
| Metz-Connect | Ewio2-M-Bm Firmware | before 2.2.0 |
| Metz-Connect | Ewio2-Bm Firmware | before 2.2.0 |