MB connect line vulnerabilities
Every vulnerability this feed holds for MB connect line, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
12 vulnerabilities tracked.
- 8.7 An unauthenticated remote attacker can perform password resets for any user with known username and email without rate limiting.
- 8.7 The backups created by the application use a weak static password allowing an unauthenticated remote attacker to access their content.
- 8.7 An unauthenticated remote attacker can perform a DoS in the backends backup creation function.
- 8.6 A high privileged remote attacker can perform a code injection in the backends backup restore function leading to code execution.
- 8.6 A high privileged remote attacker can perform an OpenSSL code injection in the backends ImportPKCS12 function leading to code execution.
- 8.6 A high privileged remote attacker can perform an OpenSSL code injection in the frontends device importer function leading to code execution.
- 8.6 A high privileged remote attacker can perform a code injection in the backends patch activate function leading to code execution.
- 8.6 A high privileged remote attacker can perform a code injection in the backends network auth function leading to code execution.
- 6.9 A high privileged remote attacker can upload arbitrary files to a guessable location.
- 6.9 An unauthenticated remote attacker can perform an authentication bypass on the comcheck function, potentially triggering traffic on other…
- 6.4 An unauthenticated remote attacker can perform a XSS attack on a logged in backend user allowing for execution of multiple critical system…
- 5.3 An unauthenticated remote attacker can perform a CSRF attack on a logged in backend user allowing for execution of multiple critical system…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that MB connect line is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Red Hat Linux IBM Microsoft Apple Apache Software Foundation Google n/a Oracle Corporation zephyrproject Unknown FFMPEG JetBrains OpenEMR Drupal SAP_SE Cisco go-vikunja Eclipse Foundation hickory-dns n8n-io Hitachi Samsung Semiconductor Tanium