An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result of incorrect permission assignment for the web server.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Janitza | UMG 96RM-E 24V(5222063) | unaffected |
|
||||||
| Janitza | UMG 96RM-E 230V(5222062) | unaffected |
|
||||||
| Weidmueller | ENERGY METER 750-230 (2540910000) | unaffected |
|
||||||
| Weidmueller | ENERGY METER 750-24 (2540900000) | unaffected |
|
No data.
No data.
No data.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 10 Mar 2026 08:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result of incorrect permission assignment for the web server. | |
| Title | Incorrect Permission Assignment on power analyzer | |
| Weaknesses | CWE-732 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: CERTVDE
Published:
Updated: 2026-03-10T08:27:10.120Z
Reserved: 2025-04-16T11:17:48.311Z
Link: CVE-2025-41712
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses