CVE-2025-27452 CVE-2025-27452
Insecure Apache httpd configuration in MEAC300-FNADE4 enables directory listing, allowing attackers to read sensitive files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-27452?
CVE-2025-27452 is a medium-severity vulnerability in Endress+Hauser MEAC300-FNADE4, published on 3 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The configuration of the Apache httpd webserver which serves the MEAC300-FNADE4 web application, is partly insecure. There are modules activated that are not required for the operation of the FNADE4 web application. The functionality of the some modules
pose a risk to the webserver which enable dircetory listing.
Weakness: CWE-548
Which versions are affected by CVE-2025-27452?
It affects 1 product.
Products include Endress Meac300-Fnade4 Firmware.
How do I fix CVE-2025-27452?
No fix has been published for CVE-2025-27452 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-27452 being exploited?
There is no known exploitation of CVE-2025-27452 in the wild and no public exploit code.
Other vulnerabilities in Endress+Hauser MEAC300-FNADE4
Sources
Also known as GHSA-9vp2-38f9-8838.