Endress+Hauser MEAC300-FNADE4 with Firmware >=0.17.0

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical3high5medium0low

updated 2026-10-27

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-27449US	critical9.8	0.60% (49th)	—	no fix	2025-07-03	—
CVE-2025-1710US	critical9.8	0.60% (49th)	—	no fix	2025-07-03	—
CVE-2025-1708US	high7.5	0.48% (41st)	—	no fix	2025-07-03	—
CVE-2025-27452US	high7.5	0.45% (39th)	—	no fix	2025-07-03	—
CVE-2025-27453US	medium6.5	0.43% (37th)	—	no fix	2025-07-03	—
CVE-2025-27451US	—	0.43% (37th)	—	no fix	2025-07-03	—
CVE-2025-1709US	medium6.5	0.42% (36th)	—	no fix	2025-07-03	—
CVE-2025-1711US	high7.5OT elevated	0.40% (34th)	—	no fix	2025-07-03	—
CVE-2025-27447US	medium6.1	0.35% (28th)	—	no fix	2025-07-03	—
CVE-2025-27455US	medium6.1	0.34% (27th)	—	no fix	2025-07-03	—
CVE-2025-27448US	medium5.4	0.32% (25th)	—	no fix	2025-07-03	—
CVE-2025-27450US	—	0.30% (23rd)	—	no fix	2025-07-03	—
CVE-2025-27454US	—	0.21% (10th)	—	no fix	2025-07-03	—

The flaw types (CWEs) most of these CVEs share.

CWE-307Improper Restriction of Excessive Authentication Attempts2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-1004Sensitive Cookie Without 'HttpOnly' Flag1 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-1392Use of Default Credentials1 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-204Observable Response Discrepancy1 CVEs
CWE-256Plaintext Storage of a Password1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.