Low VDE-2021-012 3 CVEs

MB connect line: multiple products partially affected by DNSpooq

Published Apr 26, 2021 · Updated May 14, 2025 · Revision 2

Vendor: MB connect line Product: mbNET HW1 Product: mbNET/mbNET.rokey

Summary

Multiple issues have been identified in dnsmasq < 2.83

Details

Impact
Please see the CVE-IDs for details.

Remediation
Update to the following versions:

| Product | Fixed Version |
|--------------------|-------------------|
| mbNET/mbNET .rokey | >= 7.0.0 |
| mbNET HW1 | >= 5.1.11 |

Vulnerabilities 3

Unscored —

CVE-2020-25684

A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the for…

dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine

Jan 20, 2021
Unscored —

CVE-2020-25685

A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward…

dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine

Jan 20, 2021
Unscored —

CVE-2020-25686 Public exploit

A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending…

dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine

Jan 20, 2021

Revision history

2025-05-14 #2
Fix: version space
2021-04-26 #1
Initial revision.

References

MB connect line advisory overview at CERT@VDE
https://certvde.com/en/advisories/vendor/mbconnectline/
VDE-2021-012: MB connect line: multiple products partially affected by DNSpooq - HTML
https://certvde.com/en/advisories/VDE-2021-012