High severity7.2NVD Advisory· Published Jul 21, 2025· Updated Jun 17, 2026
CVE-2025-41673
CVE-2025-41673
Description
A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elements used in an OS command.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*Range: <2.3.3
- Helmholz/REX 100v5Range: 0.0.0
- MB connect line/mbNET.miniv5Range: 0.0.0
Patches
Vulnerability mechanics
References
2- certvde.com/de/advisories/VDE-2025-058nvdVendor Advisory
- seclists.org/fulldisclosure/2025/Jul/38nvdMailing List
News mentions
0No linked articles in our index yet.