Vendor

    MB connect line

    52 known vulnerabilities in products by MB connect line, 0 of them actively exploited (CISA KEV).

    Key figures

    52

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in MB connect line
    CriticalCVE-2021-33527

    OS Command Injection in mbDIALUP <= 3.9R0.0

    also in 1 other product

    		9.8
    CriticalCVE-2024-45274

    MB connect line/Helmholz: Remote code execution via confnet service

    also in 3 other products

    		9.8
    CriticalCVE-2020-10383

    Mbconnectline Mbconnect24: Remote Code Execution

    		9.8
    HighCVE-2020-10382

    Mbconnectline Mbconnect24: Remote Code Execution

    		8.8
    CriticalCVE-2020-35565

    Mbconnectline Mbconnect24: security vulnerability

    		9.8
    HighCVE-2020-35558

    SSRF in products of MB connect line and Helmholz

    also in 2 other products

    		7.5
    CriticalCVE-2024-45275

    MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

    also in 3 other products

    		9.8
    HighCVE-2026-33613

    MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray

    also in 2 other products

    		8.8
    HighCVE-2023-0985

    Helmholz and MB Connect Line: Account takeover via password reset in multiple products

    also in 4 other products

    		8.8
    CriticalCVE-2026-33615

    MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint

    also in 2 other products

    		9.1
    HighCVE-2021-34580

    Remote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.0

    also in 2 other products

    		7.5
    HighCVE-2021-34575

    Information Exposure in mymbCONNECT24, mbCONNECT24 <= 2.8.0

    also in 2 other products

    		7.5
    HighCVE-2025-41675

    MB connect line mbNET.mini: OS Command Injection

    also in 2 other products

    		7.2
    HighCVE-2025-41674

    Remote Command Injection in diagnostic Action Due to Improper Input Neutralization

    also in 2 other products

    		7.2
    HighCVE-2025-41673

    Remote Command Injection in send_sms Action Due to Improper Input Neutralization

    also in 2 other products

    		7.2
    HighCVE-2020-35564

    Mbconnectline Mbconnect24: security vulnerability

    		7.5
    MediumCVE-2020-12527

    Improper Access Validation in products of MB connect line and Helmholz

    also in 4 other products

    		6.5
    MediumCVE-2020-35570

    Foreced Browsing vulnerability in products of MB connect line and Helmholz

    also in 2 other products

    		5.3
    MediumCVE-2020-35566

    Local file inclusion vulnerability in products of MB connect line and Helmholz

    also in 2 other products

    		5.3
    HighCVE-2025-41678

    SQL Injection via POST Requests Allowing Configuration Database Manipulation

    also in 2 other products

    		6.5
    MediumCVE-2020-35561

    SSRF in variuos products of MB connect line and Helmholz

    also in 2 other products

    		5.3
    MediumCVE-2020-35557

    Improper Access Validation in products of MB connect line and Helmholz

    also in 2 other products

    		6.5
    HighCVE-2024-45276

    MB connect line/Helmholz: tmp directory exposed via webservice

    also in 3 other products

    		7.5
    HighCVE-2024-45272

    MB connect line/Helmholz: Generation of weak passwords vulnerability

    also in 5 other products

    		7.5
    MediumCVE-2020-10381

    Mbconnectline Mbconnect24: SQL Injection

    		5.3

    All vulnerabilities in search

    Products

    Products by MB connect line
    Mbconnect24380
    Mymbconnect24380
    Mbnet.mini Firmware130