7.2

CVE-2025-41688

High Privilege RCE via LUA Sandbox Escape

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerMB connect line
≫
Produkt mbNET HW1
Default Statusunaffected
Version <= 5.1.11
Version 0.0.0
Status affected
HerstellerMB connect line
≫
Produkt mbNET/mbNET.rokey
Default Statusunaffected
Version 0.0.0
Version < 7.3.0
Status affected
HerstellerHelmholz
≫
Produkt REX 300
Default Statusunaffected
Version <= 5.1.11
Version 0.0.0
Status affected
HerstellerHelmholz
≫
Produkt REX 200/250
Default Statusunaffected
Version 0.0.0
Version < 7.3.0
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.436
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
info@cert.vde.com 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-653 Improper Isolation or Compartmentalization

The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.