CVE-2025-6225

Publication date

2026-01-07 13:00:46

Family

CERT-PL

State

PUBLISHED

Description

Kieback&Peter Neutrino-GLT product is used for building management. Its web component "SM70 PHWEB" is vulnerable to shell command injection via login form. The injected commands would execute with low privileges. The vulnerability has been fixed in version 9.40.02