AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-2605

CRITICAL · CVSS 9.9 EPSS 13.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-05-02 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.9. Its EPSS score suggests a 13.4% probability of exploitation in the next 30 days.

CVE
CVE-2025-2605
Severity
CRITICAL
CVSS
9.9
EPSS
13.41%

Original NVD Description

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privilege Abuse. This issue affects MB-Secure: from V11.04 before V12.53 and MB-Secure PRO from V01.06 before V03.09.Honeywell also recommends updating to the most recent version of this product.

Related CVEs

Other vulnerabilities affecting the same vendor(s)