Approved changes feed: RSS · Atom

cpe:2.3:a:mb_connect_line:mbnet.mini:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMb Connect Line (40f64ffd-1097-56cb-a890-2fe37828274d)
ProductMbnet.Mini (4a285a3c-2363-5a2b-a56f-17534ebd953f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40852 vulnerable 2026-06-08 08:01:21.050024 Command injection via malicious configuration
HIGH (7.2)
A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to an system execute leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
Published: 2026-05-27T08:06:36.875Z
Updated: 2026-05-27T11:54:17.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40851 vulnerable 2026-06-08 08:01:21.044244 Command injection via USB
HIGH (8.4)
A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
Published: 2026-05-27T08:06:21.815Z
Updated: 2026-05-27T11:54:33.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41681 vulnerable 2026-06-08 07:25:07.201829 Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input
MEDIUM (4.8)
A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.
Published: 2025-07-21T09:31:25.796Z
Updated: 2025-11-03T19:59:07.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41679 vulnerable 2026-06-08 07:25:07.201367 Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service
MEDIUM (5.3)
An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denial of service that affects only the network initializing wizard (Conftool) service.
Published: 2025-07-21T09:31:04.713Z
Updated: 2025-11-03T19:59:05.914Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41678 vulnerable 2026-06-08 07:25:07.201019 SQL Injection via POST Requests Allowing Configuration Database Manipulation
MEDIUM (6.5)
A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.
Published: 2025-07-21T09:30:44.484Z
Updated: 2025-11-03T19:59:04.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41677 vulnerable 2026-06-08 07:25:07.200566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41676 vulnerable 2026-06-08 07:25:07.199888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41675 vulnerable 2026-06-08 07:25:07.199243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41674 vulnerable 2026-06-08 07:25:07.198602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41673 vulnerable 2026-06-08 07:25:07.195125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45276 vulnerable 2026-06-08 06:45:55.799714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45275 vulnerable 2026-06-08 06:45:55.798889 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45274 vulnerable 2026-06-08 06:45:55.794295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45273 vulnerable 2026-06-08 06:45:55.785208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45271 vulnerable 2026-06-08 06:45:55.754692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.