What’s Vulnerable › Vulnerabilities

CVE-2025-41688: High Privilege RCE via LUA Sandbox Escape

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-31 · updated 2026-06-17
• Weakness: CWE-653

Description

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox.

Affected products

• Helmholz REX 200/250: before 7.3.0 — fixed in 7.3.0
• Helmholz REX 300: through 5.1.11
• MB connect line mbNET HW1: through 5.1.11
• MB connect line mbNET/mbNET.rokey: before 7.3.0 — fixed in 7.3.0

How to fix

Upgrade to a fixed version: Helmholz REX 200/250 7.3.0; MB connect line mbNET/mbNET.rokey 7.3.0. Check the vendor advisory for mitigations.

References

• https://certvde.com/de/advisories/VDE-2025-065
• https://certvde.com/de/advisories/VDE-2025-069

Get alerted when CVE-2025-41688 or the next vulnerability affects your stack