Weidmueller: Multiple vulnerabilities in Energy Meter 750-24 and Energy Meter 750-230
An unauthenticated remote attacker can exploit several vulnerabilities in Weidmueller devices Energy Meter 750-24 and Energy Meter 750-230 to ultimately gain full system access and remote code execution.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-41712US | — | — | ||
An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result of incorrect permissi… | ||||
| CVE-2025-41711US | —OT erhöht | — | ||
An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access. | ||||
| CVE-2025-41710US | —OT erhöht | — | ||
An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges. | ||||
| CVE-2025-41709US | — | — | ||
An unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- VDE-2025-096: Weidmueller: Multiple vulnerabilities in Energy Meter 750-24 and Energy Meter 750-230 - HTMLself
- CERT@VDE Security Advisories for Weidmuellerexternal
- Weidmueller Security Advisory Boardexternal
- VDE-2025-096: Weidmueller: Multiple vulnerabilities in Energy Meter 750-24 and Energy Meter 750-230 - CSAFself
Behebungen (16)
- BehobenFirmware 3.13 installed on ENERGY METER 750-230
Update to version 3.14
- BehobenFirmware 3.13 installed on ENERGY METER 750-230
Update to version 3.14
- BehobenFirmware 3.13 installed on ENERGY METER 750-230
Update to version 3.14
- BehobenFirmware 3.13 installed on ENERGY METER 750-230
Update to version 3.14
- BehobenFirmware 3.13 installed on ENERGY METER 750-24
Update to version 3.14
- BehobenFirmware 3.13 installed on ENERGY METER 750-24
Update to version 3.14
- BehobenFirmware 3.13 installed on ENERGY METER 750-24
Update to version 3.14
- BehobenFirmware 3.13 installed on ENERGY METER 750-24
Update to version 3.14
- BehobenFirmware <=3.13 installed on ENERGY METER 750-230
Update to version 3.14
- BehobenFirmware <=3.13 installed on ENERGY METER 750-230
Update to version 3.14
- BehobenFirmware <=3.13 installed on ENERGY METER 750-230
Update to version 3.14
- BehobenFirmware <=3.13 installed on ENERGY METER 750-230
Update to version 3.14
- BehobenFirmware <=3.13 installed on ENERGY METER 750-24
Update to version 3.14
- BehobenFirmware <=3.13 installed on ENERGY METER 750-24
Update to version 3.14
- BehobenFirmware <=3.13 installed on ENERGY METER 750-24
Update to version 3.14
- BehobenFirmware <=3.13 installed on ENERGY METER 750-24
Update to version 3.14
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan