Product by MB connect line
Mbnet.mini Firmware
13 known vulnerabilities in Mbnet.mini Firmware (MB connect line), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-45274 | MB connect line/Helmholz: Remote code execution via confnet service | 9.8 | |
| Critical | CVE-2024-45275 | MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords | 9.8 | |
| High | CVE-2025-41675 | MB connect line mbNET.mini: OS Command Injection | 7.2 | |
| High | CVE-2025-41674 | Remote Command Injection in diagnostic Action Due to Improper Input Neutralization | 7.2 | |
| High | CVE-2025-41673 | Remote Command Injection in send_sms Action Due to Improper Input Neutralization | 7.2 | |
| High | CVE-2025-41678 | SQL Injection via POST Requests Allowing Configuration Database Manipulation | 6.5 | |
| High | CVE-2024-45276 | MB connect line/Helmholz: tmp directory exposed via webservice | 7.5 | |
| High | CVE-2025-41679 | Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service | 5.3 | |
| Medium | CVE-2025-41677 | Resource Exhaustion via POST Requests to send-mail Action | 4.9 | |
| Medium | CVE-2025-41676 | Resource Exhaustion via POST Requests to send-sms Action | 4.9 | |
| High | CVE-2024-45271 | MB connect line/Helmholz: Remote code execution due to improper input validation | 8.4 | |
| High | CVE-2024-45273 | MB connect line/Helmholz: Weak encryption of configuration file | 8.4 | |
| Medium | CVE-2025-41681 | Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input | 4.8 |