Helmholz REX 100

• CVE-2025-41681 Medium 4.8 Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input 0.3%
• CVE-2025-41679 Medium 5.3 Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service 0.8%
• CVE-2025-41678 Medium 6.5 SQL Injection via POST Requests Allowing Configuration Database Manipulation 0.7%
• CVE-2025-41677 Medium 4.9 Resource Exhaustion via POST Requests to send-mail Action 0.7%
• CVE-2025-41676 Medium 4.9 Resource Exhaustion via POST Requests to send-sms Action 0.6%
• CVE-2025-41675 High 7.2 Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization 0.7%
• CVE-2025-41674 High 7.2 Remote Command Injection in diagnostic Action Due to Improper Input Neutralization 0.7%
• CVE-2025-41673 High 7.2 Remote Command Injection in send_sms Action Due to Improper Input Neutralization 0.7%
• CVE-2024-5672 High 7.2 Red Lion Europe: mbNET.mini vulnerable to OS command injection 1.2%