Mbconnectline Mbnet.Mini Firmware vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Latest Mbconnectline Mbnet.Mini Firmware vulnerabilities

CVE-2025-41681 — Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input (CVSS 4.8)
CVE-2025-41679 — Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service (CVSS 7.5)
CVE-2025-41678 — SQL Injection via POST Requests Allowing Configuration Database Manipulation (CVSS 7.2)
CVE-2025-41677 — Resource Exhaustion via POST Requests to send-mail Action (CVSS 4.9)
CVE-2025-41676 — Resource Exhaustion via POST Requests to send-sms Action (CVSS 4.9)
CVE-2025-41675 — Remote Command Injection via GET in Cloud Server Communication Script Due to Improper Input Neutralization (CVSS 7.2)
CVE-2025-41674 — Remote Command Injection in diagnostic Action Due to Improper Input Neutralization (CVSS 7.2)
CVE-2025-41673 — Remote Command Injection in send_sms Action Due to Improper Input Neutralization (CVSS 7.2)
CVE-2024-45276 — MB connect line/Helmholz: tmp directory exposed via webservice (CVSS 7.5)
CVE-2024-45275 — MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords (CVSS 9.8)
CVE-2024-45274 — MB connect line/Helmholz: Remote code execution via confnet service (CVSS 9.8)
CVE-2024-45273 — MB connect line/Helmholz: Weak encryption of configuration file (CVSS 7.8)
CVE-2024-45271 — MB connect line/Helmholz: Remote code execution due to improper input validation (CVSS 7.8)