Security Advisory

CVE-2025-6225

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-07 13:00:46
Last updated 2026-01-07 14:12:33
Assigner CERT-PL
State PUBLISHED

Description

Kieback&Peter Neutrino-GLT product is used for building management. Its web component "SM70 PHWEB" is vulnerable to shell command injection via login form. The injected commands would execute with low privileges. The vulnerability has been fixed in version 9.40.02