268 matches found
CVE-2020-10384
MB CONNECT LINE MB CONNECT24/mmbCONNECT24 are affected by CVE-2020-10384: local privilege escalation from www-data to root in all versions up to 2.6.1. Mitigation: upgrade to version 2.71 or higher (as recommended by MB connect line); until patching, enable bruteforce detection and firewall prote...
CVE-2020-10383
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the commb24sysapi module...
CVE-2020-10383
The CVE-2020-10383 issue affects MB CONNECT LINE mbCONNECT24 and mymbCONNECT24 software up to version 2.5.0. The vulnerability is an unauthenticated remote code execution in the com_mb24sysapi module, allowing an attacker to execute arbitrary code remotely. Affected versions include mbCONNECT24 p...
CVE-2020-10382
MB CONNECT LINE mbCONNECT24 and the in-house remote maintenance solution mymbCONNECT24 are affected up to version 2.5.0. The vulnerability is an authenticated remote code execution in the backup-scheduler, surfaced across multiple sources. Impact is code execution on the device hosting the backup...
CVE-2020-10382
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler...
CVE-2020-10381
CVE-2020-10381 affects the MB CONNECT LINE software family (mymbCONNECT24 and mbCONNECT24) up to version 2.5.0. The vulnerability is an unauthenticated SQL injection in DATA24, allowing an attacker to discover database and table names. Practical impact is disclosure of schema information without ...
CVE-2020-10381
An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discover database and table names...
PT-2020-12052 · Mb Connect Line · Mbconnect24
Name of the Vulnerable Software and Affected Versions: mbCONNECT24 versions through 2.5.0 mymbCONNECT24 versions through 2.5.0 Description: An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software. There is an authenticated remote code execution in the backup-schedule...