OS Command Injection in Powered BLUE 870 by Mubit
CVE-2025-54958

5.3MEDIUM

Key Information:

Vendor

Mubit Co.,ltd.

Status
Powered Blue 870
Vendor
CVE Published:
8 August 2025

What is CVE-2025-54958?

The Powered BLUE 870, developed by Mubit, has a significant OS command injection vulnerability in versions up to and including 0.20130927. This flaw allows attackers to execute arbitrary OS commands, potentially leading to unauthorized access and control over the affected systems. Users are advised to assess their systems and apply necessary mitigations to safeguard against potential exploitation.

Affected Version(s)

Powered BLUE 870 0.20130927 and prior

References

https://www.mubit.co.jp/sub/products/blue/pb-base-cloud-8...
https://jvn.jp/en/jp/JVN39636188/

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-54958 : OS Command Injection in Powered BLUE 870 by Mubit