Buffer Overflow Vulnerability in Conftool Service by Vendor
CVE-2025-41679

5.3MEDIUM

Key Information:

Vendor

Mb Connect Line

Status
Mbnet.mini
Rex 100
Vendor
CVE Published:
21 July 2025

What is CVE-2025-41679?

An unauthenticated remote attacker may exploit a buffer overflow vulnerability in the Conftool service, which is responsible for network initialization. This vulnerability can lead to a denial of service, affecting the availability of the service and potentially disrupting network operations.

Affected Version(s)

mbNET.mini 0.0.0 < 2.3.3

REX 100 0.0.0 < 2.3.3

References

https://certvde.com/de/advisories/VDE-2025-058

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

F. Bruckmoser, M. Eder, J. Heigl, M. Heudorn, G. Hofmarcher, M. Kadlec, M. Pristauz-Telsnigg, S. Resch, P. Schweinzer, M. Gschiel from St. Poelten UAS
.
CVE-2025-41679 : Buffer Overflow Vulnerability in Conftool Service by Vendor