CVE-2025-41688

Summary

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox.

Affected Software

VendorProductVersion RangeStatus
MB connect linembNET HW10.0.0 <= 5.1.11affected
MB connect linembNET/mbNET.rokey0.0.0 < 7.3.0affected
HelmholzREX 3000.0.0 <= 5.1.11affected
HelmholzREX 200/2500.0.0 < 7.3.0affected

Weaknesses

  • CWE-653: CWE-653 Improper Isolation or Compartmentalization

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References