CVE-2025-4008 KEV
8.8
HIGH · CVSS 3.1 · EPSS 93.7% (pctl 100)
Patch first
On CISA KEV — known exploited in the wild, due 2025-10-23.
Description
The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulnerable to command injection. Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.
Scoring
| CVSS | 8.8 (HIGH, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 93.67% — more likely to be exploited than 100% of all CVEs |
| Weakness | CWE-77 |
| On CISA KEV | yes — remediate by 2025-10-23 |
| Public exploit | none known |
| Published | 2025-05-21 |
| Last modified | 2026-06-17 |
CISA KEV
| Name | Smartbedded Meteobridge Command Injection Vulnerability |
|---|---|
| Added | 2025-10-02 |
| Due | 2025-10-23 |
| Vendor / product | Smartbedded / Meteobridge |
| Ransomware use | none reported |
Affected (2)
| Vendor | Product |
|---|---|
| smartbedded | meteobridge firmware |
| smartbedded | meteobridge vm |
References
→ the Explorer · watch your stack · NVD