CVE-2025-41733

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-41733", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "state": "PUBLISHED", "assignerShortName": "CERTVDE", "dateReserved": "2025-04-16T11:17:48.319Z", "datePublished": "2025-11-18T10:17:46.326Z", "dateUpdated": "2025-11-18T21:17:53.438Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Energy-Controlling EWIO2-M", "vendor": "METZ CONNECT", "versions": [{"lessThan": "2.2.0", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Energy-Controlling EWIO2-M-BM", "vendor": "METZ CONNECT", "versions": [{"lessThan": "2.2.0", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Ethernet-IO EWIO2-BM", "vendor": "METZ CONNECT", "versions": [{"lessThan": "2.2.0", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Noam Moshe from Claroty Team82"}, {"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Tomer Goldschmidt from Claroty Team82"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The commissioning wizard on the affected devices does not validate if the device is already initialized. An unauthenticated remote attacker can construct POST requests to set root credentials.<br>"}], "value": "The commissioning wizard on the affected devices does not validate if the device is already initialized. An unauthenticated remote attacker can construct POST requests to set root credentials."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-305", "description": "CWE-305 Authentication Bypass by Primary Weakness", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2025-11-18T10:17:46.326Z"}, "references": [{"url": "https://certvde.com/de/advisories/VDE-2025-097"}], "source": {"advisory": "VDE-2025-097", "defect": ["CERT@VDE#641881"], "discovery": "UNKNOWN"}, "title": "Possible malfunction credential injection", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-18T21:17:44.611618Z", "id": "CVE-2025-41733", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-18T21:17:53.438Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-41733", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-11-18T21:17:44.611618Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-18T21:17:49.287Z"}}], "cna": {"title": "Possible malfunction credential injection", "source": {"defect": ["CERT@VDE#641881"], "advisory": "VDE-2025-097", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Noam Moshe from Claroty Team82"}, {"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Tomer Goldschmidt from Claroty Team82"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "METZ CONNECT", "product": "Energy-Controlling EWIO2-M", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "2.2.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "METZ CONNECT", "product": "Energy-Controlling EWIO2-M-BM", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "2.2.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "METZ CONNECT", "product": "Ethernet-IO EWIO2-BM", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "2.2.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://certvde.com/de/advisories/VDE-2025-097"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "The commissioning wizard on the affected devices does not validate if the device is already initialized. An unauthenticated remote attacker can construct POST requests to set root credentials.", "supportingMedia": [{"type": "text/html", "value": "The commissioning wizard on the affected devices does not validate if the device is already initialized. An unauthenticated remote attacker can construct POST requests to set root credentials.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-305", "description": "CWE-305 Authentication Bypass by Primary Weakness"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2025-11-18T10:17:46.326Z"}}}, "cveMetadata": {"cveId": "CVE-2025-41733", "state": "PUBLISHED", "dateUpdated": "2025-11-18T21:17:53.438Z", "dateReserved": "2025-04-16T11:17:48.319Z", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "datePublished": "2025-11-18T10:17:46.326Z", "assignerShortName": "CERTVDE"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Energy-Controlling EWIO2-M", "vendor": "METZ CONNECT", "versions": [{"lessThan": "2.2.0", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Energy-Controlling EWIO2-M-BM", "vendor": "METZ CONNECT", "versions": [{"lessThan": "2.2.0", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Ethernet-IO EWIO2-BM", "vendor": "METZ CONNECT", "versions": [{"lessThan": "2.2.0", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}], "source": "info@cert.vde.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:metz-connect:ewio2-m_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7013D45A-B3DD-4110-A0FF-D0C01B859A37", "versionEndExcluding": "2.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:metz-connect:ewio2-m:-:*:*:*:*:*:*:*", "matchCriteriaId": "892DDE15-8FE1-4D57-BCB6-5DFAC1F6826C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:metz-connect:ewio2-m-bm_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "05FE24BB-6605-444F-ACFF-D2FD2B70C05E", "versionEndExcluding": "2.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:metz-connect:ewio2-m-bm:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A515C34-A698-47EF-B542-EAA491AE6CBA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:metz-connect:ewio2-bm_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DD9B7323-4C67-4DAC-905F-DDE5D6BD9D80", "versionEndExcluding": "2.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:metz-connect:ewio2-bm:-:*:*:*:*:*:*:*", "matchCriteriaId": "C7E4CCBC-35EE-4683-A039-55ABEE27E809", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The commissioning wizard on the affected devices does not validate if the device is already initialized. An unauthenticated remote attacker can construct POST requests to set root credentials."}, {"lang": "es", "value": "El asistente de puesta en marcha en los dispositivos afectados no valida si el dispositivo ya est\u00e1 inicializado. Un atacante remoto no autenticado puede construir solicitudes POST para establecer credenciales de root."}], "id": "CVE-2025-41733", "lastModified": "2026-10-18T20:10:00.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "info@cert.vde.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-41733", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-11-18T21:17:44.611618Z", "version": "2.0.3"}}]}, "published": "2025-11-18T11:15:46.700", "references": [{"source": "info@cert.vde.com", "tags": ["Third Party Advisory"], "url": "https://certvde.com/de/advisories/VDE-2025-097"}], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-305"}], "source": "info@cert.vde.com", "type": "Secondary"}]}

{}

{"created": "2025-11-19T10:48:04.383337+00:00", "updated": "2025-11-19T10:48:04.383372+00:00", "vendors": ["metz_connect", "metz_connect$PRODUCT$ewio2"]}