CVE-2025-1710 CVE-2025-1710
Attackers can bypass authentication controls via brute-force attacks due to missing rate limiting, potentially gaining unauthorized access to the storage manager.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-1710?
CVE-2025-1710 is a high-severity vulnerability in Endress+Hauser MEAC300-FNADE4, published on 3 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The maxView Storage Manager does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks.
Weakness: CWE-307
Which versions are affected by CVE-2025-1710?
It affects 1 product.
Products include Endress Meac300-Fnade4 Firmware.
How do I fix CVE-2025-1710?
No fix has been published for CVE-2025-1710 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-1710 being exploited?
There is no known exploitation of CVE-2025-1710 in the wild and no public exploit code.
Other vulnerabilities in Endress+Hauser MEAC300-FNADE4
Sources
Also known as GHSA-47c4-h5xr-wvg6.