Mbconnectline vulnerabilities
We track 8 vulnerabilities in Mbconnectline products across 13 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on July 21, 2025.
Latest Mbconnectline vulnerabilities
- 7.5 High severity
mbNET.mini: Out-of-bounds Write
An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denial of service that affects only the network initializing wizard (Conftool) service.
- 7.2 High severity
mbNET.mini: Improper Neutralization of Special Elements used in an SQL Command
A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.
- 7.2 High severity
mbNET.mini: Improper Neutralization of Special Elements used in an OS Command
A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server communication script due to improper neutralization of special elements used in an OS command.
- 7.2 High severity
mbNET.mini: Improper Neutralization of Special Elements used in an OS Command
A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic action due to improper neutralization of special elements used in an OS command.
- 7.2 High severity
mbNET.mini: Improper Neutralization of Special Elements used in an OS Command
A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elements used in an OS command.
- 9.8 Critical severity
mbNET.mini: Use of Hard-coded Credentials
The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.
- 7.8 High severity
mbNET.mini: Inadequate Encryption Strength
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.
- 7.5 High severity
mbCONNECT24: Use of Weak Credentials
An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.