Skip to content
OpenAdvisories
High · 7.2 CVE-2025-41688 EUVD-2025-23258GHSA-c9gc-5qvw-jf2c

High Privilege RCE via LUA Sandbox Escape

Published Jul 31, 2025 · Updated Jul 31, 2025 · Assigned by CERTVDE

Vendor: Helmholz Vendor: MB connect line Product: mbNET HW1 Product: mbNET/mbNET.rokey Product: REX 200/250 Product: REX 300

Description

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox.

Affected products

VendorProductAffectedFixed
MB connect line mbNET HW1 0.0.0 – ≤ 5.1.11 —
MB connect line mbNET/mbNET.rokey 0.0.0 – < 7.3.0 7.3.0
Helmholz REX 300 0.0.0 – ≤ 5.1.11 —
Helmholz REX 200/250 0.0.0 – < 7.3.0 7.3.0

Advisories 2

References