Detections
Analytics

Smartbedded Meteobridge < 6.2 RCE (CVE-2025-4008)

high Nessus Plugin ID 282455

Language:

Synopsis

The remote host is affected by an unauthenticated command injection vulnerability.

Description

The version of Smartbedded Meteobridge installed on the remote host is 6.1 or prior. It is, therefore, affected by a command injection vulnerability as referenced in the CVE-2025-4008 advisory. In the template.cgi script, unsanitized user input from the query string is passed directly to an eval call.

An unauthenticated remote attacker can exploit this flaw by sending a specially crafted GET request to the publicly accessible CGI endpoint. Successful exploitation allows the attacker to execute arbitrary commands with root privileges, leading to a full system compromise.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update Smartbedded Meteobridge to 6.2 or later.

See Also

https://forum.meteohub.de/viewtopic.php?t=18687

Plugin Details

Severity: High

ID: 282455

File Name: smartbedded_meteobridge_CVE-2025-4008.nasl

Version: 1.2

Type: remote

Family: CGI abuses

Published: 1/8/2026

Updated: 1/8/2026

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: High

Base Score: 8.3

Temporal Score: 6.9

Vector: CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2025-4008

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 8.2

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

CVSS v4

Risk Factor: High

Base Score: 8.7

Threat Score: 8.7

Threat Vector: CVSS:4.0/E:A

Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Vulnerability Information

CPE: cpe:/a:smartbedded:meteobridge_firmware

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/21/2025

Vulnerability Publication Date: 5/21/2025

CISA Known Exploited Vulnerability Due Dates: 10/23/2025

Reference Information

CVE: CVE-2025-4008