CVE-2025-9176 - neurobin shc Environment Variable shc.c make os command injection

Back Back to CVE browser

MEDIUM

neurobin shc Environment Variable shc.c make os command injection

Published Aug 19, 2025

4.8

MEDIUM

CVSS 4.0

EPSS 1.17%

Description

A security flaw has been discovered in neurobin shc up to 4.0.3. Impacted is the function make of the file src/shc.c of the component Environment Variable Handler. The manipulation results in os command injection. The attack is only possible with local access. The exploit has been released to the public and may be exploited.

Affected products

Vendor Neurobin Product Shc Default
n/a
- Version
  4.0.0
  Status
  affected
  Constraints
  -
- Version
  4.0.1
  Status
  affected
  Constraints
  -
- Version
  4.0.2
  Status
  affected
  Constraints
  -
- Version
  4.0.3
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Neurobin

Shc

n/a

Version	Status	Constraints
4.0.0	affected	-
4.0.1	affected	-
4.0.2	affected	-
4.0.3	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-77

CWE-78

OS Command Injection

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25253
Advisory
https://magnificent-dill-351.notion.site/Command-Execution-of-env-in-shc-4-0-3-249c693918ed80c997f4e9420f945d01
exploitBroken Link
https://vuldb.com/?ctiid.320557
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.320557
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.630744
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25253		Advisory
https://magnificent-dill-351.notion.site/Command-Execution-of-env-in-shc-4-0-3-249c693918ed80c997f4e9420f945d01		exploitBroken Link
https://vuldb.com/?ctiid.320557		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.320557		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.630744		third-party-advisoryThird Party AdvisoryVDB Entry