An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Janitza | UMG 96RM-E 24V(5222063) | unaffected |
|
||||||
| Janitza | UMG 96RM-E 230V(5222062) | unaffected |
|
||||||
| Weidmueller | ENERGY METER 750-230 (2540910000) | unaffected |
|
||||||
| Weidmueller | ENERGY METER 750-24 (2540900000) | unaffected |
|
No data.
No data.
No data.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 10 Mar 2026 08:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges. | |
| Title | Use of Hard-coded Credentials in power analyzer | |
| Weaknesses | CWE-798 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: CERTVDE
Published:
Updated: 2026-03-10T08:26:30.909Z
Reserved: 2025-04-16T11:17:48.311Z
Link: CVE-2025-41710
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses