MB
Vendor
Mbconnectline
108
CVEs
0
On KEV
0
New 30D
Products
MB9.8
Mbconnect24
Mbconnectline
38 CVEs0 on KEV0 new
MY9.8
Mymbconnect24
Mbconnectline
38 CVEs0 on KEV0 new
MF9.8
Mbnet.mini Firmware
Mbconnectline
13 CVEs0 on KEV0 new
MB9.8
Mbdialup
Mbconnectline
2 CVEs0 on KEV0 new
MF7.8
Mbnet Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MH7.8
Mbnet Hw1 Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MF7.8
Mbnet.rokey Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MM7.8
Mbspider Mdh 905 Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MM7.8
Mbspider Mdh 906 Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MM7.8
Mbspider Mdh 915 Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MM7.8
Mbspider Mdh 916 Firmware
Mbconnectline
2 CVEs0 on KEV0 new
MH7.8
Mbnet Hw1
Mbconnectline
1 CVEs0 on KEV0 new
MM7.8
Mbnet Mbnet.rokey
Mbconnectline
1 CVEs0 on KEV0 new
MB7.8
Mbspider
Mbconnectline
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-33617 | MY Mymbconnect24 Mbconnectline | 5.3 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint |
| CVE-2026-33616 | MY Mymbconnect24 Mbconnectline | 7.5 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api Endpoint |
| CVE-2026-33615 | MY Mymbconnect24 Mbconnectline | 9.1 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint |
| CVE-2026-33614 | MY Mymbconnect24 Mbconnectline | 7.5 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpoint |
| CVE-2026-33613 | MY Mymbconnect24 Mbconnectline | 8.8 | Apr 2 | MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray |
| CVE-2025-41681 | MF Mbnet.mini Firmware Mbconnectline | 4.8 | Jul 21 | Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input |
| CVE-2025-41679 | MF Mbnet.mini Firmware Mbconnectline | 7.5 | Jul 21 | Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service |
| CVE-2025-41678 | MF Mbnet.mini Firmware Mbconnectline | 7.2 | Jul 21 | SQL Injection via POST Requests Allowing Configuration Database Manipulation |
| CVE-2025-41677 | MF Mbnet.mini Firmware Mbconnectline | 4.9 | Jul 21 | Resource Exhaustion via POST Requests to send-mail Action |
| CVE-2025-41676 | MF Mbnet.mini Firmware Mbconnectline | 4.9 | Jul 21 | Resource Exhaustion via POST Requests to send-sms Action |
| CVE-2025-41675 | MF Mbnet.mini Firmware Mbconnectline | 7.2 | Jul 21 | Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization |
| CVE-2025-41674 | MF Mbnet.mini Firmware Mbconnectline | 7.2 | Jul 21 | Remote Command Injection in diagnostic Action Due to Improper Input Neutralization |
| CVE-2025-41673 | MF Mbnet.mini Firmware Mbconnectline | 7.2 | Jul 21 | Remote Command Injection in send_sms Action Due to Improper Input Neutralization |
| CVE-2024-45276 | MF Mbnet.mini Firmware Mbconnectline | 7.5 | Oct 15 | MB connect line/Helmholz: tmp directory exposed via webservice |
| CVE-2024-45275 | MF Mbnet.mini Firmware Mbconnectline | 9.8 | Oct 15 | MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords |
| CVE-2024-45274 | MF Mbnet.mini Firmware Mbconnectline | 9.8 | Oct 15 | MB connect line/Helmholz: Remote code execution via confnet service |
| CVE-2024-45273 | MY Mymbconnect24 Mbconnectline | 7.8 | Oct 15 | MB connect line/Helmholz: Weak encryption of configuration file |
| CVE-2024-45272 | MB Mbconnect24 Mbconnectline | 7.5 | Oct 15 | MB connect line/Helmholz: Generation of weak passwords vulnerability |
| CVE-2024-45271 | MF Mbnet.mini Firmware Mbconnectline | 7.8 | Oct 15 | MB connect line/Helmholz: Remote code execution due to improper input validation |
| CVE-2023-4834 | MB Mbconnect24 Mbconnectline | 4.3 | Oct 16 | In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an… |
| CVE-2023-1779 | MB Mbconnect24 Mbconnectline | 4.3 | Jun 6 | Helmholz and MB Connect Line: Account takeover via password reset in multiple products |
| CVE-2023-0985 | MB Mbconnect24 Mbconnectline | 8.8 | Jun 6 | Helmholz and MB Connect Line: Account takeover via password reset in multiple products |
| CVE-2022-22520 | MB Mbconnect24 Mbconnectline | 5.3 | Sep 14 | A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and… |
| CVE-2021-34580 | MY Mymbconnect24 Mbconnectline | 7.5 | Oct 27 | In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login… |
| CVE-2021-34575 | MB Mbconnect24 Mbconnectline | 7.5 | Aug 2 | In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends |
| CVE-2021-34574 | MB Mbconnect24 Mbconnectline | 4.3 | Aug 2 | In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his… |
| CVE-2021-33527 | MB Mbdialup Mbconnectline | 9.8 | Aug 2 | In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not… |
| CVE-2021-33526 | MB Mbdialup Mbconnectline | 7.8 | Aug 2 | In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a… |
| CVE-2020-12530 | MB Mbconnect24 Mbconnectline | 6.1 | Mar 2 | An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 |
| CVE-2020-12529 | MB Mbconnect24 Mbconnectline | 5.3 | Mar 2 | An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to… |
| CVE-2020-12528 | MB Mbconnect24 Mbconnectline | 7.7 | Mar 2 | An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 |
| CVE-2020-12527 | MB Mbconnect24 Mbconnectline | 6.5 | Mar 2 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 |
| CVE-2020-35570 | MB Mbconnect24 Mbconnectline | 5.3 | Feb 16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2 |
| CVE-2020-35569 | MB Mbconnect24 Mbconnectline | 6.1 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35568 | MB Mbconnect24 Mbconnectline | 4.3 | Feb 16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 |
| CVE-2020-35567 | MB Mbconnect24 Mbconnectline | 7.8 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35566 | MB Mbconnect24 Mbconnectline | 5.3 | Feb 16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 |
| CVE-2020-35565 | MB Mbconnect24 Mbconnectline | 9.8 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35564 | MB Mbconnect24 Mbconnectline | 7.5 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35563 | MB Mbconnect24 Mbconnectline | 5.4 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35561 | MB Mbconnect24 Mbconnectline | 5.3 | Feb 16 | An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 |
| CVE-2020-35560 | MY Mymbconnect24 Mbconnectline | 6.1 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35559 | MB Mbconnect24 Mbconnectline | 4.3 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 |
| CVE-2020-35558 | MB Mbconnect24 Mbconnectline | 7.5 | Feb 16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2 |
| CVE-2020-35557 | MB Mbconnect24 Mbconnectline | 6.5 | Feb 16 | An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the… |
| CVE-2020-24568 | MB Mbconnect24 Mbconnectline | 6.5 | Oct 2 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1 |
| CVE-2020-24570 | MB Mbconnect24 Mbconnectline | 6.5 | Sep 30 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1 |
| CVE-2020-24569 | MB Mbconnect24 Mbconnectline | 4.3 | Sep 30 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1 |
| CVE-2020-10384 | MB Mbconnect24 Mbconnectline | 7.8 | Apr 14 | An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1 |
| CVE-2020-10383 | MB Mbconnect24 Mbconnectline | 9.8 | Apr 14 | An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0 |
| CVE-2020-10382 | MB Mbconnect24 Mbconnectline | 8.8 | Apr 14 | An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0 |
| CVE-2020-10381 | MB Mbconnect24 Mbconnectline | 5.3 | Apr 14 | An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0 |
