CVEs-PoC/2025/CVE-2025-2605.md

CVE-2025-2605

Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privilege Abuse. This issue affects MB-Secure: from V11.04 before V12.53 and MB-Secure PRO from V01.06 before V03.09.Honeywell also recommends updating to the most recent version of this product.

POC

Reference

• http://seclists.org/fulldisclosure/2025/May/19
• https://www.honeywell.com/us/en/product-security#security-notices

Github

• https://github.com/fkie-cad/nvd-json-data-feeds