CVE-2025-27461: Endress MEAC300-FNADE4 Firmware

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

During startup, the device automatically logs in the EPC2 Windows user without requesting a password.

Affected products

  • Endress MEAC300-FNADE4 Firmware: any version

Published 2025-07-03. Last modified 2026-06-17.