[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4B_dw5_D_mcsnjZZYHSXZ1XpukNZ7jJyZRVcXW6wAPU":3,"g5a-risk:CVE-2025-41678":128},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":29,"epssTimeSeries":40,"severity":42,"affectedProducts":43,"affectedProductsCount":54,"references":55,"referencesCount":54,"weaknesses":66,"weaknessesCount":75,"isActivelyExploited":53,"cisaInfo":29,"otxData":29,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":116,"notableEvents":117},"CVE-2025-41678","What is CVE-2025-41678?","A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.","A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL sta...","2025-07-21T10:15:24.98","2025-11-06T16:44:52.22",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"info@cert.vde.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H","NETWORK","LOW","HIGH","NONE","UNCHANGED",6.5,"MEDIUM",null,1.2,5.2,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":24,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},5.9,[],[],0.00695,[41,39,39,39,39,39,39],0.00647,"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"mbconnectline","mbnet.mini_firmware","*","cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":53},"mbnet.mini","-","cpe:2.3:h:mbconnectline:mbnet.mini:-:*:*:*:*:*:*:*",false,2,[56,61],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fcertvde.com\u002Fde\u002Fadvisories\u002FVDE-2025-058","Certvde",[60],"Vendor Advisory",{"url":62,"source":63,"tags":64},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJul\u002F38","Seclists",[65],"Mailing List",[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","","Stable","Base","Simple",1,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2025-41678? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2025-41678, a high severity cyber security vulnerability from 2025. A high privileged remote attacker can alter the configurati...","CVE-2025-41678, CVE-2025-41678 vulnerability, CVE-2025-41678 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, mbconnectline security, mbnet.mini_firmware vulnerability, mbnet.mini vulnerability","\u002Fwhat-is\u002Fcve-2025-41678",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2025-41678","Cybersecurity","CVE-2025-41678, CVE-2025-41678 vulnerability, CVE-2025-41678 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":104,"Negate":29,"Nodes":105},"AND",[106,112],{"Operator":107,"Negate":53,"CPEMatch":108},"OR",[109],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":110,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":111,"VersionEndIncluding":29},"73596D99-CA79-4FF6-AEF1-62C751C7FD23","2.3.3",{"Operator":107,"Negate":53,"CPEMatch":113},[114],{"Vulnerable":53,"Criteria":52,"MatchCriteriaID":115,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"A1D1B769-DA91-4F0C-AD34-D735B7A8B8FF",[],[118],{"id":119,"eventType":120,"eventTime":121,"details":122,"label":123,"color":124},"eaa95a15-8206-454e-bd86-13e3c54934f0","NEW_NVD","2025-07-22T19:30:24.099448+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":126,"version":127},1793229526678,"2.0",{"score":129,"band":130,"action":131,"scoredAt":132},46,"Medium","Plan remediation","2026-10-28T07:09:13.091303+00:00"]