An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Janitza | UMG 96RM-E 24V(5222063) | unaffected |
|
||||||
| Janitza | UMG 96RM-E 230V(5222062) | unaffected |
|
||||||
| Weidmueller | ENERGY METER 750-230 (2540910000) | unaffected |
|
||||||
| Weidmueller | ENERGY METER 750-24 (2540900000) | unaffected |
|
No data.
No data.
No data.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 10 Mar 2026 08:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access. | |
| Title | Use of a Broken or Risky Cryptographic Algorithm for firmware images of power analyzer | |
| Weaknesses | CWE-327 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: CERTVDE
Published:
Updated: 2026-03-10T08:26:48.759Z
Reserved: 2025-04-16T11:17:48.311Z
Link: CVE-2025-41711
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses