Critical · published November 18, 2025
🔥 An unauthenticated attacker can gain root access just by sending a simple POST request! Think of it like a hotel receptionist who doesn't check if guests have already checked in — anyone can walk up to the desk and demand a key to any room. One crafty request and suddenly, they’re all-access! An attacker could waltz in and take complete control of your device, read sensitive data, change settings, or even lock you out entirely! This is alarmingly severe, with potentially devastating consequences for your systems and data integrity.
Think of it like a hotel receptionist who doesn't check if guests have already checked in — anyone can walk up to the desk and demand a key to any room. One crafty request and suddenly, they’re all-access! The vulnerability in the commissioning wizard fails to check if the device is already initialized, allowing attackers to set root credentials via crafted POST requests without any authentication.
An attacker could waltz in and take complete control of your device, read sensitive data, change settings, or even lock you out entirely! This is alarmingly severe, with potentially devastating consequences for your systems and data integrity. Immediately patch your devices to the latest firmware version. Ensure that only authenticated users can access the commissioning wizard and regularly audit your systems for unauthorized access. You can tackle this! Follow these steps and fortify your defenses like a true security hero! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| metz-connect/ewio2-m_firmware | < 2.2.0 | 2.2.0 |
| metz-connect/ewio2-m-bm_firmware | < 2.2.0 | 2.2.0 |
| metz-connect/ewio2-bm_firmware | < 2.2.0 | 2.2.0 |