Approved changes feed: RSS · Atom

cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorMbconnectline (9053089b-610a-5565-bb20-e8df004a7da3)
ProductMbnet.Mini Firmware (97fa829f-05cc-5ccd-a313-5cf04c1530d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41681 vulnerable 2026-06-08 07:25:07.201895 Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input
MEDIUM (4.8)
A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.
Published: 2025-07-21T09:31:25.796Z
Updated: 2025-11-03T19:59:07.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41679 vulnerable 2026-06-08 07:25:07.201424 Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service
MEDIUM (5.3)
An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denial of service that affects only the network initializing wizard (Conftool) service.
Published: 2025-07-21T09:31:04.713Z
Updated: 2025-11-03T19:59:05.914Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41678 vulnerable 2026-06-08 07:25:07.201076 SQL Injection via POST Requests Allowing Configuration Database Manipulation
MEDIUM (6.5)
A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.
Published: 2025-07-21T09:30:44.484Z
Updated: 2025-11-03T19:59:04.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41677 vulnerable 2026-06-08 07:25:07.200628 Resource Exhaustion via POST Requests to send-mail Action
MEDIUM (4.9)
A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession.
Published: 2025-07-21T09:30:28.614Z
Updated: 2025-11-03T19:59:03.144Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41676 vulnerable 2026-06-08 07:25:07.200049 Resource Exhaustion via POST Requests to send-sms Action
MEDIUM (4.9)
A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession.
Published: 2025-07-21T09:30:07.473Z
Updated: 2025-11-03T19:59:01.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41675 vulnerable 2026-06-08 07:25:07.199473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41674 vulnerable 2026-06-08 07:25:07.198672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41673 vulnerable 2026-06-08 07:25:07.197328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45276 vulnerable 2026-06-08 06:45:55.799884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45275 vulnerable 2026-06-08 06:45:55.798984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45274 vulnerable 2026-06-08 06:45:55.798222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45273 vulnerable 2026-06-08 06:45:55.793015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45271 vulnerable 2026-06-08 06:45:55.756659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.