CVE-2025-41675 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server communication script due to improper neutralization…
High CVSS: 7.2

CVE-2025-41675

A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server communication script due to improper neutralization of special elements used in an OS command.
Vendor
Mbconnectline
Product
Mbnet.mini Firmware
CWE
CWE-78
Yayın Tarihi
2025-07-21 10:15:24
Güncelleme
2025-11-06 16:45:17
Source Identifier
info@cert.vde.com
KEV Date Added
-

Kategoriler

CWE-78 Mbnet.mini Firmware HIGH Mbconnectline 2025

Referanslar

https://certvde.com/de/advisories/VDE-2025-058 http://seclists.org/fulldisclosure/2025/Jul/38