Summary
Multiple Vulnerabilities in mbConnect24serv (a software service of mbDIALUP) can lead to arbitrary code execution due to improper privilege management.
Update A, 2021-11-24
corrected fixed version in solution from 3.9R0.4 to 3.9R0.5
Update B, 2022-03-28
Updated CVSS score from CVE-2021-33527 from 7.8 to 9.8 due to new information about the vulnerability
Details
Remediation
Update to 3.9R0.5
Impact
Please consult the CVE entries.
Vulnerabilities 2
-
Critical 9.8
OS Command Injection in mbDIALUP <= 3.9R0.0
In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the pr…
-
High 7.8
Privilege escalation in mbDIALUP <= 3.9R0.0
In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privil…
Revision history
-
#4
Fix: version space, added distribution
-
#3
Update B
-
#2
Update A
-
#1
Initial revision.
References
-
MB connect line advisory overview at CERT@VDE
https://certvde.com/en/advisories/vendor/mbconnectline/
-
VDE-2021-017: MB connect line: Privilege escalation in mbDIALUP - HTML
https://certvde.com/en/advisories/VDE-2021-017