EUVD-2025-22075

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

High privileged remote attacker can alter configuration database via improper SQL statement neutralization

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-41678	21 Jul 202510:42	–	circl
CNNVD	MB Connect Line mbNET.mini 注入漏洞	21 Jul 202500:00	–	cnnvd
CNVD	MB CONNECT LINE mbNET.mini SQL Injection Vulnerability	25 Jul 202500:00	–	cnvd
CVE	CVE-2025-41678	21 Jul 202509:30	–	cve
Cvelist	CVE-2025-41678 SQL Injection via POST Requests Allowing Configuration Database Manipulation	21 Jul 202509:30	–	cvelist
NVD	CVE-2025-41678	21 Jul 202510:15	–	nvd
OSV	CVE-2025-41678	21 Jul 202510:15	–	osv
Packet Storm	📄 Helmholz Industrial Router REX100 / MBConnectline mbNET.mini Command Injection / DoS	30 Jul 202500:00	–	packetstorm
Positive Technologies	PT-2025-30254 · Helmholz +1 · Rex100 +1	21 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-41678	23 Jul 202510:01	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "49ae0064-fd50-3f6a-854c-555a0345a772",
        "vendor": {
          "name": "MB connect line"
        }
      },
      {
        "id": "74c4cd60-2c15-3414-a168-1dc385e59cef",
        "vendor": {
          "name": "Helmholz"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "94dcabc7-8557-3710-ae01-944468b3d2b2",
        "product": {
          "name": "mbNET.mini"
        },
        "product_version": "0.0.0 <2.3.3"
      },
      {
        "id": "e1e6370f-aa4b-3806-a4ce-7ff3e3704b17",
        "product": {
          "name": "REX 100"
        },
        "product_version": "0.0.0 <2.3.3"
      }
    ]
  }
]

Source	Link
certvde	www.certvde.com/de/advisories/VDE-2025-058

03 Oct 2025 20:07Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

EPSS0.00669

SSVC