VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 21, 2025· Updated Nov 3, 2025

Remote Command Injection in send_sms Action Due to Improper Input Neutralization

CVE-2025-41673

Description

A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elements used in an OS command.

Affected products

2
  • Helmholz/REX 100v5
    Range: 0.0.0
  • MB connect line/mbNET.miniv5
    Range: 0.0.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.