What’s Vulnerable › Vulnerabilities

CVE-2025-41712: Incorrect Permission Assignment on power analyzer

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-10 · updated 2026-06-17
• Weakness: CWE-732

Description

An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result of incorrect permission assignment for the web server.

Affected products

• Janitza UMG 96RM-E 230V(5222062): through 3.13
• Janitza UMG 96RM-E 24V(5222063): through 3.13
• Weidmueller ENERGY METER 750-230 (2540910000): through 3.13
• Weidmueller ENERGY METER 750-24 (2540900000): through 3.13

References

• https://certvde.com/en/advisories/VDE-2025-079/
• https://certvde.com/en/advisories/VDE-2025-096/
• https://janitza.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-079.json
• https://weidmueller.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-096.json

Get alerted when CVE-2025-41712 or the next vulnerability affects your stack