Read the docs

MB connect line

Records104All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high69CVSS 7.0–8.9

Exploited now

MB connect line records in CISA KEV

No MB connect line vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mbconnect24 38 records MEDIUM Mymbconnect24 38 records MEDIUM Mbnet.mini Firmware 13 records MEDIUM Mbdialup 2 records MEDIUM Mbnet.rokey Firmware 2 records MEDIUM Mbnet Firmware 2 records MEDIUM Mbnet Hw1 Firmware 2 records MEDIUM Mbspider Mdh 905 Firmware 2 records MEDIUM

Records

2 records in Mbdialup · all components

TI-2021-12922 CVE-2021-33527 · GHSA-hrmp-939q-g4mq

OS Command Injection in mbDIALUP <= 3.9R0.0

Priority MEDIUM 49

In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04524 Published 2021-08-02 No fix listed CWE-20
TI-2021-12921 CVE-2021-33526 · GHSA-2992-6547-hhfp

Privilege escalation in mbDIALUP <= 3.9R0.0

Priority LOW 34

In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in a…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00253 Published 2021-08-02 No fix listed CWE-269
Open these records in search →