CVE-2025-41673 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special eleme…
High CVSS: 7.2

CVE-2025-41673

A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elements used in an OS command.
Vendor
Mbconnectline
Product
Mbnet.mini Firmware
CWE
CWE-78
Yayın Tarihi
2025-07-21 10:15:23
Güncelleme
2025-11-06 16:45:33
Source Identifier
info@cert.vde.com
KEV Date Added
-

Kategoriler

CWE-78 Mbnet.mini Firmware HIGH Mbconnectline 2025

Referanslar

https://certvde.com/de/advisories/VDE-2025-058 http://seclists.org/fulldisclosure/2025/Jul/38