Weidmueller Energy Meter 750-24 2540900000 vulnerabilities

4 CVEs affecting Weidmueller Energy Meter 750-24 2540900000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-41712, published 2026-03-10.

More from Weidmueller.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-41709, published 2026-03-10. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. An unauthenticated remote attacker can perform a command injection via Modbus-TCP or Modbus-RTU to gain read and write access on the affected device.
• CVE-2025-41712, published 2026-03-10. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. An unauthenticated remote attacker who tricks a user to upload a manipulated HTML file can get access to sensitive information on the device. This is a result of incorrect permission assignment for…
• CVE-2025-41710, published 2026-03-10. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges.
• CVE-2025-41711, published 2026-03-10. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. An unauthenticated remote attacker can use firmware images to extract password hashes and brute force plaintext passwords of accounts with limited access.