CVE-2025-2421: Remote Code Execution in Profelis Informatics' SambaBox
Published May 2, 2025
·Updated
Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Informatics SambaBox allows Code Injection.
This issue affects SambaBox: before 5.1.
Affected Software
2 affected components
Felisify Sambabox<5.1
Profelis Informatics SambaBox<5.1
Event History
May 2, 2025
CVE Published
via MITRE·11:27 AM
Data Sourced
via MITRE·11:27 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-2421?
CVE-2025-2421 has been classified as a high severity vulnerability due to the potential for code injection.
2
How do I fix CVE-2025-2421?
To fix CVE-2025-2421, upgrade to SambaBox version 5.1 or later.
3
What types of attacks can CVE-2025-2421 facilitate?
CVE-2025-2421 can facilitate code injection attacks, allowing an attacker to execute arbitrary code.
4
Which versions of SambaBox are affected by CVE-2025-2421?
CVE-2025-2421 affects all versions of SambaBox prior to 5.1.
5
Is there a workaround for CVE-2025-2421?
No official workaround for CVE-2025-2421 is provided, so updating to the latest version is recommended.