mbConnect24serv Code Execution

The vulnerability of the mbConnect24serv component for clients to establish encrypted connections with mbDIALUP is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code using a malicious OpenVPN...

mbConnect24serv Code Execution

The vulnerability of the mbConnect24serv component for clients to establish encrypted connections with mbDIALUP is related to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability can allow an attacker to enhance their...

PT-2021-4937

Name of the Vulnerable Software and Affected Versions MB connect line mbDIALUP versions = 3.9R0.0 Description The issue is related to insufficient access control in the mbConnect24serv component, allowing a low-privileged local attacker to send a command to the service running with NT...

PT-2021-4871

Name of the Vulnerable Software and Affected Versions mbDIALUP versions = 3.9R0.0 Description The issue is related to a remote attacker sending a specifically crafted HTTP request to the service, which does not correctly validate the input. This can lead to arbitrary code execution with the...