{"id":"CVE-2025-9176","state":"PUBLISHED","title":"neurobin shc Environment Variable shc.c make os command injection","description":"A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the public and may be exploited.","publishedAt":"2025-08-19T23:32:07.022Z","updatedAt":"2025-08-20T15:15:58.216Z","severity":{"score":4.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["neurobin shc"],"affected":[{"vendor":"neurobin","product":"shc","versions":[{"version":"4.0.0","status":"affected"},{"version":"4.0.1","status":"affected"},{"version":"4.0.2","status":"affected"},{"version":"4.0.3","status":"affected"}],"modules":["Environment Variable Handler"]}],"references":["https://vuldb.com/?id.320557","https://vuldb.com/?ctiid.320557","https://vuldb.com/?submit.630744","https://magnificent-dill-351.notion.site/Command-Execution-of-env-in-shc-4-0-3-249c693918ed80c997f4e9420f945d01"],"weaknesses":["CWE-78","CWE-77"],"ingestedAt":"2026-10-29T20:10:13.529Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/9xxx/CVE-2025-9176.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-9176","state":"PUBLISHED","datePublished":"2025-08-19T23:32:07.022Z","dateUpdated":"2025-08-20T15:15:58.216Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-08-19T14:00:30.542Z"},"containers":{"cna":{"title":"neurobin shc Environment Variable shc.c make os command injection","descriptions":[{"lang":"en","value":"A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the public and may be exploited."},{"lang":"de","value":"Es wurde eine Schwachstelle in neurobin shc bis 4.0.3 entdeckt. Dabei geht es um die Funktion make der Datei src/shc.c der Komponente Environment Variable Handler. Die Bearbeitung verursacht os command injection. Der Angriff muss lokal passieren. Die Schwachstelle wurde öffentlich offengelegt und könnte ausgenutzt werden."}],"affected":[{"vendor":"neurobin","product":"shc","versions":[{"version":"4.0.0","status":"affected"},{"version":"4.0.1","status":"affected"},{"version":"4.0.2","status":"affected"},{"version":"4.0.3","status":"affected"}],"modules":["Environment Variable Handler"]}],"references":[{"url":"https://vuldb.com/?id.320557","name":"VDB-320557 | neurobin shc Environment Variable shc.c make os command injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.320557","name":"VDB-320557 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.630744","name":"Submit #630744 | shc <=4.0.3 Command Execution","tags":["third-party-advisory"]},{"url":"https://magnificent-dill-351.notion.site/Command-Execution-of-env-in-shc-4-0-3-249c693918ed80c997f4e9420f945d01","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4.3,"vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","type":"CWE","lang":"en","description":"OS Command Injection"}]},{"descriptions":[{"cweId":"CWE-77","type":"CWE","lang":"en","description":"Command Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-08-19T23:32:07.022Z"},"timeline":[{"time":"2025-08-19T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-08-19T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-08-19T16:05:45.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"s0l42 (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://magnificent-dill-351.notion.site/Command-Execution-of-env-in-shc-4-0-3-249c693918ed80c997f4e9420f945d01","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-08-20T13:58:23.592118Z","id":"CVE-2025-9176","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-08-20T15:15:58.216Z"}}]}}}