What is CVE-2025-41675?

CVE-2025-41675 is a high-severity vulnerability in Helmholz Rex 100, classified under OS Command Injection. CVSS score: 7.2/10. Published 2025-07-21.

How severe is CVE-2025-41675?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Helmholz Rex 100

CVE-2025-41675

A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server communication script due to improper neutralization of special elements used in an OS command.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.006 (44.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Helmholz Rex 100 — versions 0.0.0
Mb Connect Line Mbnet.mini — versions 0.0.0
Mbconnectline Mbnet.mini
Mbconnectline Mbnet.mini_firmware

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

info@cert.vde.com (Vendor Advisory)
af854a3a-2127-422b-91ae-364da2661108 (Mailing List)

Frequently asked questions

What is CVE-2025-41675?: CVE-2025-41675 is a high-severity vulnerability in Helmholz Rex 100, classified under OS Command Injection. CVSS score: 7.2/10. Published 2025-07-21.
How severe is CVE-2025-41675?: High severity. CVSS v3 base score is 7.2 out of 10.