CVE-2025-41677 — Resource Exhaustion via POST Requests to send-mail Action

CVE-2025-41677

Resource Exhaustion via POST Requests to send-mail Action PUBLISHED

Description (CNA)

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession.

Affected (CNA)

Vendor / product	Versions
MB connect line / mbNET.mini	affected 0.0.0 before 2.3.3
Helmholz / REX 100	affected 0.0.0 before 2.3.3

CWE

CWE-400

References

https://certvde.com/de/advisories/VDE-2025-058

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2025/Jul/38