Skip to content
OpenAdvisories
Critical VDE-2024-056 5 CVEs

MB connect line: Multiple Vulnerabilities in mbNET.mini Product

Published Oct 15, 2024 · Updated Aug 27, 2025 · Revision 4

Vendor: MB connect line Product: mbNET.mini

Summary

Multiple vulnerabilities have been discovered in MB connect line mbNET.mini product allowing for RCE or unauthorized file access.

Details

Impact
CVE-2024-45271, CVE-2024-45274 and CVE-2024-45275 allow remote code execution with system privileges, resulting in full compromise of the device.

CVE-2024-45273 allows undetectable tampering and manipulation of encrypted configuration files.

CVE-2024-45276 allows unauthenticated access to potential sensitive files.

Remediation
Update mbNET.mini to the version 2.3.1

Vulnerabilities 5

  • Critical 9.8
    CVE-2024-45274

    MB connect line/Helmholz: Remote code execution via confnet service

    An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.

    MB connect line Helmholz mbNET.mini REX100
  • Critical 9.8
    CVE-2024-45275

    MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

    The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.

    MB connect line Helmholz mbNET.mini REX100
  • High 8.4
    CVE-2024-45271

    MB connect line/Helmholz: Remote code execution due to improper input validation

    An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation.

    MB connect line Helmholz mbNET.mini REX100
  • High 8.4
    CVE-2024-45273

    MB connect line/Helmholz: Weak encryption of configuration file

    An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

    MB connect line Helmholz mymbCONNECT24 mbCONNECT24
  • High 7.5
    CVE-2024-45276

    MB connect line/Helmholz: tmp directory exposed via webservice

    An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication.

    MB connect line Helmholz mbNET.mini REX100

Revision history

  1. #1.1.2

    Update: CWE from CVE-2024-45271, Revision History

  2. #1.0.2

    Fix: version space

  3. #1.0.1

    Fix: correct certvde domain, added self-reference

  4. #1.0.0

    Initial revision.

References