CVE-2025-41675

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-41675
A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server communication script due to improper neutralization of special elements used in an OS command.

7.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://certvde.com/de/advisories/VDE-2025-058 Vendor Advisory
http://seclists.org/fulldisclosure/2025/Jul/38 Mailing List
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*
History

06 Nov 2025, 16:45

Type Values Removed Values Added
First Time Mbconnectline
Mbconnectline mbnet.mini
Mbconnectline mbnet.mini Firmware
CPE cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*
References
  • () http://seclists.org/fulldisclosure/2025/Jul/38 - Mailing List
References () https://certvde.com/de/advisories/VDE-2025-058 - () https://certvde.com/de/advisories/VDE-2025-058 - Vendor Advisory
Information

Published : 2025-07-21 10:15

Updated : 2025-11-06 16:45

NVD link : CVE-2025-41675

Mitre link : CVE-2025-41675

CVE.ORG link : CVE-2025-41675

JSON object : View

Products Affected

mbconnectline

  • mbnet.mini
  • mbnet.mini_firmware
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')