Most recent entries from csaf_mbconnectlinegmbh

VDE-2026-044 — MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24

Wed, 27 May 2026 11:00:00 +0000

Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.

VDE-2026-068 — MB connect line: Authenticated unintended access to critical program parameters in mbCONNECT24/mymbCONNECT24

Tue, 23 Jun 2026 11:00:00 +0000

There is a vulnerability in mbCONNECT24/mymbCONNECT24 that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.

VDE-2026-054 — MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini

Wed, 27 May 2026 11:00:00 +0000

Two command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.

VDE-2026-030 — MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24

Thu, 02 Apr 2026 11:00:00 +0000

Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24 that could allow RCE, SQLi or information leakage.

VDE-2026-024 — MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24

Mon, 23 Mar 2026 12:00:00 +0000

Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24 that could allow unauthenticated RCE or SQLi.

VDE-2024-068 — MB connect line: Multiple Vulnerabilities in MB connect line Products

Tue, 15 Oct 2024 08:00:00 +0000

Multiple vulnerabilities have been discovered in MB connect line products that could allow RCE or unauthorized file access.

CVE-2024-45272 affects the mbCONNECT24 and mymbCONNECT24 products.

CVE-2024-45273 affects the mbNET/mbNET.rokey, mbCONNECT24, mymbCONNECT24, mbNET HW1, and mbSPIDER products.

CVE-2024-45275 affects only the mbNET HW1 product.

VDE-2024-056 — MB connect line: Multiple Vulnerabilities in mbNET.mini Product

Tue, 15 Oct 2024 08:00:00 +0000

Multiple vulnerabilities have been discovered in MB connect line mbNET.mini product allowing for RCE or unauthorized file access.

VDE-2024-010 — Vulnerabilities in mbCONNECT24/mymbCONNECT24

Tue, 18 Mar 2025 11:00:00 +0000

The data24 service that is bundled with every installation of mbCONNECT24/mymbCONNECT24 has two serious flaws in core components. These combined can lead to a complete loss of confidentiality, integrity and availability.

VDE-2025-065 — MB connect line: Sandbox escape in mbNET's LUA interpreter

Thu, 31 Jul 2025 10:00:00 +0000

An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in mbNET devices, enabling the execution of arbitrary operating system commands and leading to full system compromise.

VDE-2025-058 — MB connect line: Multiple vulnerabilities in mbNET.mini

Mon, 21 Jul 2025 10:00:00 +0000

Multiple vulnerabilities in all mbNET.mini devices with firmware <= 2.3.2 that allow an attacker to gain full control over the device.