CVE-2025-1708: SQL Injection
Published Jul 3, 2025
·Updated
The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its content.
Affected Software
2 affected components
All of the following
Endress Meac300-fnade4 Firmware<=0.16.0
Endress Meac300-fnade4
Remediation
Information
Customers are strongly advised to update to the newest version.
Event History
Jul 3, 2025
CVE Published
via MITRE·11:18 AM
Data Sourced
via MITRE·11:18 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-1708?
CVE-2025-1708 is considered a high severity vulnerability due to its potential for SQL injection attacks.
2
How do I fix CVE-2025-1708?
Fix CVE-2025-1708 by updating to the latest version of the Endress Meac300-fnade4 Firmware beyond version 0.16.0.
3
What type of attack can exploit CVE-2025-1708?
CVE-2025-1708 can be exploited through SQL injection attacks, allowing unauthorized access to the PostgreSQL database.
4
What software is affected by CVE-2025-1708?
CVE-2025-1708 affects Endress Meac300-fnade4 Firmware versions up to and including 0.16.0.
5
What are the potential consequences of CVE-2025-1708?
If exploited, CVE-2025-1708 could allow attackers to dump the PostgreSQL database and read its contents.