MB
Vendor
Mbconnectline
105
CVEs
0
On KEV
0
New 30D
Products
MB9.8
Mbconnect24
Mbconnectline
38 CVEs0 on KEV0 new
MY9.8
Mymbconnect24
Mbconnectline
38 CVEs0 on KEV0 new
MF9.8
Mbnet.mini Firmware
Mbconnectline
13 CVEs0 on KEV0 new
MB9.8
Mbdialup
Mbconnectline
2 CVEs0 on KEV0 new
MF7.8
Mbnet Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MH7.8
Mbnet Hw1 Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MF7.8
Mbnet.rokey Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MM7.8
Mbspider Mdh 905 Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MM7.8
Mbspider Mdh 906 Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MM7.8
Mbspider Mdh 915 Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MM7.8
Mbspider Mdh 916 Firmware
Mbconnectline
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-33617 | MB Mbconnect24 Mbconnectline | 5.3 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint |
| CVE-2026-33616 | MB Mbconnect24 Mbconnectline | 7.5 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api Endpoint |
| CVE-2026-33615 | MB Mbconnect24 Mbconnectline | 9.1 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint |
| CVE-2026-33614 | MB Mbconnect24 Mbconnectline | 7.5 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpoint |
| CVE-2026-33613 | MB Mbconnect24 Mbconnectline | 8.8 | Apr 2 | MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray |
| CVE-2025-41681 | MF Mbnet.mini Firmware Mbconnectline | 4.8 | Jul 21 | Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input |
| CVE-2025-41679 | MF Mbnet.mini Firmware Mbconnectline | 7.5 | Jul 21 | Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service |
| CVE-2025-41678 | MF Mbnet.mini Firmware Mbconnectline | 7.2 | Jul 21 | SQL Injection via POST Requests Allowing Configuration Database Manipulation |
| CVE-2025-41677 | MF Mbnet.mini Firmware Mbconnectline | 4.9 | Jul 21 | Resource Exhaustion via POST Requests to send-mail Action |
| CVE-2025-41676 | MF Mbnet.mini Firmware Mbconnectline | 4.9 | Jul 21 | Resource Exhaustion via POST Requests to send-sms Action |
| CVE-2025-41675 | MF Mbnet.mini Firmware Mbconnectline | 7.2 | Jul 21 | Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization |
| CVE-2025-41674 | MF Mbnet.mini Firmware Mbconnectline | 7.2 | Jul 21 | Remote Command Injection in diagnostic Action Due to Improper Input Neutralization |
| CVE-2025-41673 | MF Mbnet.mini Firmware Mbconnectline | 7.2 | Jul 21 | Remote Command Injection in send_sms Action Due to Improper Input Neutralization |
| CVE-2024-45276 | MF Mbnet.mini Firmware Mbconnectline | 7.5 | Oct 15 | An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication |
| CVE-2024-45275 | MF Mbnet.mini Firmware Mbconnectline | 9.8 | Oct 15 | The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices |
| CVE-2024-45274 | MF Mbnet.mini Firmware Mbconnectline | 9.8 | Oct 15 | An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication |
| CVE-2024-45273 | MM Mbspider Mdh 906 Firmware Mbconnectline | 7.8 | Oct 15 | An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used |
| CVE-2024-45272 | MB Mbconnect24 Mbconnectline | 7.5 | Oct 15 | An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost |
| CVE-2024-45271 | MF Mbnet.mini Firmware Mbconnectline | 7.8 | Oct 15 | An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation |
| CVE-2023-4834 | MB Mbconnect24 Mbconnectline | 4.3 | Oct 16 | In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an… |
| CVE-2023-1779 | MY Mymbconnect24 Mbconnectline | 4.3 | Jun 6 | Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions… |
| CVE-2023-0985 | MY Mymbconnect24 Mbconnectline | 8.8 | Jun 6 | An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote… |
| CVE-2022-22520 | MY Mymbconnect24 Mbconnectline | 5.3 | Sep 14 | A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and… |
| CVE-2021-34580 | MY Mymbconnect24 Mbconnectline | 7.5 | Oct 27 | In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login… |
| CVE-2021-34575 | MB Mbconnect24 Mbconnectline | 7.5 | Aug 2 | In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends |
| CVE-2021-34574 | MB Mbconnect24 Mbconnectline | 4.3 | Aug 2 | In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his… |
| CVE-2021-33527 | MB Mbdialup Mbconnectline | 9.8 | Aug 2 | In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not… |
| CVE-2021-33526 | MB Mbdialup Mbconnectline | 7.8 | Aug 2 | In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a… |
| CVE-2020-12530 | MB Mbconnect24 Mbconnectline | 6.1 | Mar 2 | An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 |
| CVE-2020-12529 | MB Mbconnect24 Mbconnectline | 5.3 | Mar 2 | An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to… |
| CVE-2020-12528 | MB Mbconnect24 Mbconnectline | 7.7 | Mar 2 | An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 |
| CVE-2020-12527 | MB Mbconnect24 Mbconnectline | 6.5 | Mar 2 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 |
| CVE-2020-35570 | MB Mbconnect24 Mbconnectline | 5.3 | Feb 16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2 |
| CVE-2020-35569 | MB Mbconnect24 Mbconnectline | 6.1 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35568 | MB Mbconnect24 Mbconnectline | 4.3 | Feb 16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 |
| CVE-2020-35567 | MB Mbconnect24 Mbconnectline | 7.8 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35566 | MB Mbconnect24 Mbconnectline | 5.3 | Feb 16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 |
| CVE-2020-35565 | MB Mbconnect24 Mbconnectline | 9.8 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35564 | MB Mbconnect24 Mbconnectline | 7.5 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35563 | MB Mbconnect24 Mbconnectline | 5.4 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35561 | MB Mbconnect24 Mbconnectline | 5.3 | Feb 16 | An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 |
| CVE-2020-35560 | MB Mbconnect24 Mbconnectline | 6.1 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35559 | MY Mymbconnect24 Mbconnectline | 4.3 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35558 | MB Mbconnect24 Mbconnectline | 7.5 | Feb 16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2 |
| CVE-2020-35557 | MB Mbconnect24 Mbconnectline | 6.5 | Feb 16 | An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the… |
| CVE-2020-24568 | MY Mymbconnect24 Mbconnectline | 6.5 | Oct 2 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1 |
| CVE-2020-24570 | MB Mbconnect24 Mbconnectline | 6.5 | Sep 30 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1 |
| CVE-2020-24569 | MB Mbconnect24 Mbconnectline | 4.3 | Sep 30 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1 |
| CVE-2020-10384 | MB Mbconnect24 Mbconnectline | 7.8 | Apr 14 | An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1 |
| CVE-2020-10383 | MB Mbconnect24 Mbconnectline | 9.8 | Apr 14 | An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0 |
| CVE-2020-10382 | MB Mbconnect24 Mbconnectline | 8.8 | Apr 14 | An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0 |
| CVE-2020-10381 | MY Mymbconnect24 Mbconnectline | 5.3 | Apr 14 | An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0 |