CVE-2025-41673
21.07.2025, 10:15
A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elements used in an OS command.
| Vendor | Product | Version |
|---|---|---|
| mbconnectline | mbnet.mini_firmware | 𝑥 < 2.3.3 |
𝑥
= Vulnerable software versions