Skip to content
OpenAdvisories
Medium · 4.9 CVE-2025-41677 EUVD-2025-22077GHSA-fvh4-7pmw-84hm

Resource Exhaustion via POST Requests to send-mail Action

Published Jul 21, 2025 · Updated Nov 3, 2025 · Assigned by CERTVDE

Description

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession.

Affected products

VendorProductAffectedFixed
MB connect line mbNET.mini 0.0.0 – < 2.3.3 2.3.3
Helmholz REX 100 0.0.0 – < 2.3.3 2.3.3

Advisories 2

References