CVE-2025-41675: Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization
Published Jul 21, 2025
·Updated
A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server communication script due to improper neutralization of special elements used in an OS command.
Affected Software
2 affected components
All of the following
Mbconnectline Mbnet.mini Firmware<2.3.3
Mbconnectline Mbnet.mini
Event History
Jul 21, 2025
CVE Published
via MITRE·09:29 AM
Data Sourced
via MITRE·09:29 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-41675?
CVE-2025-41675 is considered high severity due to its potential for remote arbitrary command execution.
2
How do I fix CVE-2025-41675?
To fix CVE-2025-41675, update the Mbnet.mini firmware to version 2.3.3 or higher.
3
What systems are affected by CVE-2025-41675?
CVE-2025-41675 affects the Mbconnectline Mbnet.mini firmware versions prior to 2.3.3.
4
Can CVE-2025-41675 be exploited remotely?
Yes, CVE-2025-41675 can be exploited remotely by sending specially crafted GET requests.
5
What type of attacks can CVE-2025-41675 facilitate?
CVE-2025-41675 can facilitate arbitrary command execution attacks on the affected systems.