high7.2
CVE-2025-41673
A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elem…
Impact
A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elements used in an OS command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbconnectline | Mbnet.Mini Firmware | before 2.3.3 |