CVE-2025-4008: Improper Neutralization of Special Elements used in a Command

The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote...

PT-2025-22369

Name of the Vulnerable Software and Affected Versions Smartbedded Meteobridge versions prior to 6.2 Description The Meteobridge web interface is susceptible to a command injection flaw. This allows remote, unauthenticated attackers to execute arbitrary commands with elevated privileges root on...