high8.8
CVE-2025-41736
A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename in php resulting in a…
Impact
A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename in php resulting in a remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Metz-Connect | Ewio2-M Firmware | before 2.2.0 |
| Metz-Connect | Ewio2-M-Bm Firmware | before 2.2.0 |
| Metz-Connect | Ewio2-Bm Firmware | before 2.2.0 |