{"uuid": "1da1c42b-4bc4-49b7-8399-6a4eb829c333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4008", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/835", "content": "Unauthenticated RCE on Smartbedded MeteoBridge (CVE-2025-4008)\nhttps://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008:\n\n1. Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.\n2. The file contains the following entries: As we can see, cgi-bin, exports, charts, and backup are protected and require basic authentication with meteobridge credentials.\n3. \u00e2\u0080\u008d ONEKEY is the leading European specialist in Product Cybersecurity & Compliance Management and part of the investment portfolio of PricewaterhouseCoopers Germany (PwC).\n\n@secharvester", "creation_timestamp": "2026-07-27T00:00:30.232325Z"}