Advisories · Technology
MB connect line mbNET.mini.
Every CVE that names MB connect line mbNET.mini among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Command injection via malicious configuration
- MB connect line mbNET/mbNET.rokey
- MB connect line mbNET.mini
- Command injection
- CVSS 8.4 High
Command injection via USB
- MB connect line mbNET/mbNET.rokey
- MB connect line mbNET.mini
- CWE-1287
- CVSS 4.8 Medium
Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input
- MB connect line mbNET.mini
- Helmholz REX 100
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service
- MB connect line mbNET.mini
- Helmholz REX 100
- Memory corruption
- CVSS 6.5 Medium
SQL Injection via POST Requests Allowing Configuration Database Manipulation
- MB connect line mbNET.mini
- Helmholz REX 100
- SQL injection
- CVSS 4.9 Medium
Resource Exhaustion via POST Requests to send-mail Action
- MB connect line mbNET.mini
- Helmholz REX 100
- Denial of service
- CVSS 4.9 Medium
Resource Exhaustion via POST Requests to send-sms Action
- MB connect line mbNET.mini
- Helmholz REX 100
- Denial of service
- CVSS 7.2 High
Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization
- MB connect line mbNET.mini
- Helmholz REX 100
- Command injection
- CVSS 7.2 High
Remote Command Injection in diagnostic Action Due to Improper Input Neutralization
- MB connect line mbNET.mini
- Helmholz REX 100
- Command injection
- CVSS 7.2 High
Remote Command Injection in send_sms Action Due to Improper Input Neutralization
- MB connect line mbNET.mini
- Helmholz REX 100
- Command injection
- CVSS 7.5 High
MB connect line/Helmholz: tmp directory exposed via webservice
- MB connect line mbNET.mini
- Helmholz REX100
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords
- MB connect line mbNET.mini
- Helmholz REX100
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
MB connect line/Helmholz: Remote code execution via confnet service
- MB connect line mbNET.mini
- Helmholz REX100
- Authentication bypass
- CVSS 8.4 High
MB connect line/Helmholz: Weak encryption of configuration file
- MB connect line mbNET.mini
- MB connect line mbNET/mbNET.rokey
- CWE-261
- CVSS 8.4 High
MB connect line/Helmholz: Remote code execution due to improper input validation
- MB connect line mbNET.mini
- Helmholz REX100
- Code injection