[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4B_dw5_D_mcsnjZZYHSXZ1XpukNZ7jJyZRVcXW6wAPU":3,"g5a-risk:CVE-2025-41678":127},{"success":4,"data":5,"meta":124},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":29,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":53,"references":54,"referencesCount":53,"weaknesses":65,"weaknessesCount":74,"isActivelyExploited":52,"cisaInfo":29,"otxData":29,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":115,"notableEvents":116},"CVE-2025-41678","What is CVE-2025-41678?","A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.","A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL sta...","2025-07-21T10:15:24.98","2025-11-06T16:44:52.22",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"info@cert.vde.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H","NETWORK","LOW","HIGH","NONE","UNCHANGED",6.5,"MEDIUM",null,1.2,5.2,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":24,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},5.9,[],[],0.00647,[39,39,39,39,39,39,39],"High",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"mbconnectline","mbnet.mini_firmware","*","cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":52},"mbnet.mini","-","cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*",false,2,[55,60],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fcertvde.com\u002Fde\u002Fadvisories\u002FVDE-2025-058","Certvde",[59],"Vendor Advisory",{"url":61,"source":62,"tags":63},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJul\u002F38","Seclists",[64],"Mailing List",[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","","Stable","Base","Simple",1,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2025-41678? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-41678, a high severity cyber security vulnerability from 2025. A high privileged remote attacker can alter the configurati...","CVE-2025-41678, CVE-2025-41678 vulnerability, CVE-2025-41678 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, mbconnectline security, mbnet.mini_firmware vulnerability, mbnet.mini vulnerability","\u002Fwhat-is\u002Fcve-2025-41678",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-41678","Cybersecurity","CVE-2025-41678, CVE-2025-41678 vulnerability, CVE-2025-41678 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":103,"Negate":29,"Nodes":104},"AND",[105,111],{"Operator":106,"Negate":52,"CPEMatch":107},"OR",[108],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":109,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":110,"VersionEndIncluding":29},"73596D99-CA79-4FF6-AEF1-62C751C7FD23","2.3.3",{"Operator":106,"Negate":52,"CPEMatch":112},[113],{"Vulnerable":52,"Criteria":51,"MatchCriteriaID":114,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF",[],[117],{"id":118,"eventType":119,"eventTime":120,"details":121,"label":122,"color":123},"eaa95a15-8206-454e-bd86-13e3c54934f0","NEW_NVD","2025-07-22T19:30:24.099448+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":125,"version":126},1792381329505,"2.0",{"score":128,"band":129,"action":130,"scoredAt":131},46,"Medium","Plan remediation","2026-10-16T07:08:09.705177+00:00"]