CVE-2025-41677

🗓️ 21 Jul 2025 09:30:28Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 9 Views

High privilege attacker can exhaust system resources via rapid POST requests to send-mail action

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-41677	21 Jul 202510:42	–	circl
CNNVD	MB Connect Line mbNET.mini 资源管理错误漏洞	21 Jul 202500:00	–	cnnvd
CNVD	MB CONNECT LINE mbNET.mini resource management error vulnerability (CNVD-2025-21146)	25 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-41677 Resource Exhaustion via POST Requests to send-mail Action	21 Jul 202509:30	–	cvelist
EUVD	EUVD-2025-22077	3 Oct 202520:07	–	euvd
NVD	CVE-2025-41677	21 Jul 202510:15	–	nvd
Packet Storm	📄 Helmholz Industrial Router REX100 / MBConnectline mbNET.mini Command Injection / DoS	30 Jul 202500:00	–	packetstorm
Positive Technologies	PT-2025-30253 · Fast · Fast	21 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-41677	23 Jul 202510:01	–	redhatcve
Vulnrichment	CVE-2025-41677 Resource Exhaustion via POST Requests to send-mail Action	21 Jul 202509:30	–	vulnrichment

NVD

Vulners

Node

mbconnectline mbnet.mini_firmwareRange<2.3.3

AND

mbconnectline mbnet.miniMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "mbNET.mini",
    "vendor": "MB connect line",
    "versions": [
      {
        "lessThan": "2.3.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "REX 100",
    "vendor": "Helmholz",
    "versions": [
      {
        "lessThan": "2.3.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
certvde	www.certvde.com/de/advisories/VDE-2025-058
seclists	www.seclists.org/fulldisclosure/2025/Jul/38

06 Nov 2025 16:45Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.14.9

EPSS0.00665

SSVC

CWE-400