Summary
Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24 that could allow RCE, DoS or information leakage.
Details
Impact
Multiple vulnerabilities can lead to a total loss of confidentiality, integrity and availability.
See CVE entries for details.
Remediation
Update the mbCONNECT24/mymbCONNECT24 instance to version 2.21.0.
Vulnerabilities 12
-
Critical 9.3
XSS in backend
An unauthenticated remote attacker can perform a XSS attack on a logged in backend user allowing for execution of multiple critical system actions. This could allow an attacker to shutdown the server or restore an uploaded backup. This can result in a loss of…
-
High 8.1
CSRF in backend
An unauthenticated remote attacker can perform a CSRF attack on a logged in backend user allowing for execution of multiple critical system actions. This could allow an attacker to shutdown the server or restore an uploaded backup. This can result in a loss o…
-
High 7.5
DoS in backup creation
An unauthenticated remote attacker can perform a DoS in the backends backup creation function. This can result in a total loss of availability.
-
High 7.5
Static backup password
The backups created by the application use a weak static password allowing an unauthenticated remote attacker to access their content. This can result in a total loss of confidentiality.
-
High 7.5
DoS via password reset
An unauthenticated remote attacker can perform password resets for any user with known username and email without rate limiting. This can result in a total loss of availabilit since the password will be reseted.
-
High 7.2
Command injection in network auth
A high privileged remote attacker can perform a code injection in the backends network auth function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
-
High 7.2
Command injection in patch activate
A high privileged remote attacker can perform a code injection in the backends patch activate function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
-
High 7.2
OpenSSL command injection in device importer
A high privileged remote attacker can perform an OpenSSL code injection in the frontends device importer function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
-
High 7.2
OpenSSL command injection in ImportPKCS12
A high privileged remote attacker can perform an OpenSSL code injection in the backends ImportPKCS12 function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
-
High 7.2
Command injection in backup restore
A high privileged remote attacker can perform a code injection in the backends backup restore function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
-
Medium 5.3
Authentication bypass in com_check
An unauthenticated remote attacker can perform an authentication bypass on the com_check function, potentially triggering traffic on other systems and email alerts. This can result in some loss of availability due to higher system loads.
-
Medium 4.9
Arbitrary file upload
A high privileged remote attacker can upload arbitrary files to a guessable location. This can result in a loss of availability and might be chained with other vulnerabilities.
Revision history
-
#1.0.0
Initial revision.
References
-
Product security incident reports
https://mbconnectline.com/security-advice
-
Security Incident Management SIM#2026-05-1 - PDF
https://advisories.mbconnectline.com/pdf/SIM2026-05-1.pdf
-
CERT@VDE Security Advisories for MB connect line
https://certvde.com/en/advisories/vendor/mbconnectline
-
VDE-2026-079: MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24 - HTML
https://certvde.com/en/advisories/VDE-2026-079