Energy Meter 750-230 (2540910000) CVEs and Security Vulnerabilities

CVE-2025-41709

Command injection in power analyzer via Modbus-TCP and Modbus-RTU

An unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed

Vendors

Janitza Weidmueller

Products

Umg 96rm-e 230v(5222062) Umg 96rm-e 24v(5222063) Energy Meter 750-230 (2540910000) and 1 more

CVE-2025-41710

Use of Hard-coded Credentials in power analyzer

An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Janitza Weidmueller

Products

Umg 96rm-e 230v(5222062) Umg 96rm-e 24v(5222063) Energy Meter 750-230 (2540910000) and 1 more

CVE-2025-41711

Use of a Broken or Risky Cryptographic Algorithm for firmware images of power analyzer

An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Janitza Weidmueller

Products

Umg 96rm-e 230v(5222062) Umg 96rm-e 24v(5222063) Energy Meter 750-230 (2540910000) and 1 more

CVE-2025-41712

Incorrect Permission Assignment on power analyzer

An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result of incorrect permission assignment for the web server.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Janitza Weidmueller

Products

Umg 96rm-e 230v(5222062) Umg 96rm-e 24v(5222063) Energy Meter 750-230 (2540910000) and 1 more

Search vulnerabilities

Command injection in power analyzer via Modbus-TCP and Modbus-RTU

Use of Hard-coded Credentials in power analyzer

Use of a Broken or Risky Cryptographic Algorithm for firmware images of power analyzer

Incorrect Permission Assignment on power analyzer