{"cvss":8.7,"datePublished":"2025-10-02","dateUpdated":"2025-10-02","description":"Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges (root) on affected devices.","dueDate":"2025-10-23","id":"CVE-2025-4008","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://forum.meteohub.de/viewtopic.php?t=18687 ; https://nvd.nist.gov/vuln/detail/CVE-2025-4008","product":"Meteobridge","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"cisa_known_exploited","title":"Smartbedded Meteobridge Command Injection Vulnerability","vendor":"Smartbedded"}