CVE-2025-27456: Endress MEAC300-FNADE4 Firmware

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The SMB server's login mechanism does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks.

Affected products

• Endress MEAC300-FNADE4 Firmware: any version

Published 2025-07-03. Last modified 2026-06-17.