Skip to content
OpenAdvisories
Critical · 9.9 CVE-2025-2605 EUVD-2025-13247GHSA-4p7f-6rw5-m5v7

Authenticated command injection

Published May 2, 2025 · Updated May 17, 2025 · Assigned by Honeywell

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privilege Abuse. This issue affects MB-Secure: from V11.04 before V12.53 and MB-Secure PRO from V01.06 before V03.09.Honeywell also recommends updating to the most recent version of this product.

Affected products

VendorProductAffectedFixed
Honeywell MB-Secure V11.04 – < V12.53 V12.53

References