CVE-2025-41674 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic action due to improper neutralization of special ele…
High CVSS: 7.2

CVE-2025-41674

A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic action due to improper neutralization of special elements used in an OS command.
Vendor
Mbconnectline
Product
Mbnet.mini Firmware
CWE
CWE-78
Yayın Tarihi
2025-07-21 10:15:24
Güncelleme
2025-11-06 16:45:25
Source Identifier
info@cert.vde.com
KEV Date Added
-

Kategoriler

CWE-78 Mbnet.mini Firmware HIGH Mbconnectline 2025

Referanslar

https://certvde.com/de/advisories/VDE-2025-058 http://seclists.org/fulldisclosure/2025/Jul/38