Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2025-2605

Authenticated command injection

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privilege Abuse. This issue affects MB-Secure: from V11.04 before V12.53 and MB-Secure PRO from V01.06 before V03.09.Honeywell also recommends updating to the most recent version of this product.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Honeywell MB-Secure

Default version status: affected

  • V11.04 to < V12.53affected

References