CVE-2025-41678

🗓️ 21 Jul 2025 09:30:44Reported by CERTVDEType

High privileged remote attacker can manipulate configuration database via SQL injection in POST requests

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-41678	21 Jul 202510:42	–	circl
CNNVD	MB Connect Line mbNET.mini 注入漏洞	21 Jul 202500:00	–	cnnvd
CNVD	MB CONNECT LINE mbNET.mini SQL Injection Vulnerability	25 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-41678 SQL Injection via POST Requests Allowing Configuration Database Manipulation	21 Jul 202509:30	–	cvelist
EUVD	EUVD-2025-22075	3 Oct 202520:07	–	euvd
NVD	CVE-2025-41678	21 Jul 202510:15	–	nvd
Packet Storm	📄 Helmholz Industrial Router REX100 / MBConnectline mbNET.mini Command Injection / DoS	30 Jul 202500:00	–	packetstorm
Positive Technologies	PT-2025-30254 · Helmholz +1 · Rex100 +1	21 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-41678	23 Jul 202510:01	–	redhatcve
Vulnrichment	CVE-2025-41678 SQL Injection via POST Requests Allowing Configuration Database Manipulation	21 Jul 202509:30	–	vulnrichment

NVD

Vulners

Node

mbconnectline mbnet.mini_firmwareRange<2.3.3

AND

mbconnectline mbnet.miniMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "mbNET.mini",
    "vendor": "MB connect line",
    "versions": [
      {
        "lessThan": "2.3.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "REX 100",
    "vendor": "Helmholz",
    "versions": [
      {
        "lessThan": "2.3.3",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
certvde	www.certvde.com/de/advisories/VDE-2025-058
seclists	www.seclists.org/fulldisclosure/2025/Jul/38

06 Nov 2025 16:44Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.5 - 7.2

EPSS0.00669

SSVC

CWE-89