Mb Connect Line CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2025-41676

Resource Exhaustion via POST Requests to send-sms Action

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Products

Rex 100 Mbnet.mini Mbnet.mini and 1 more

CVE-2025-41677

Resource Exhaustion via POST Requests to send-mail Action

A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline

Products

Rex 100 Mbnet.mini Mbnet.mini and 1 more

CVE-2025-41679

Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service

An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denial of service that affects only the network initializing wizard (Conftool) service.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline

Products

Rex 100 Mbnet.mini Mbnet.mini and 1 more

CVE-2024-45274

MB connect line/Helmholz: Remote code execution via confnet service

An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline

Products

Rex 100 Rex 100 Firmware Mbnet.mini and 2 more

CVE-2024-45271

MB connect line/Helmholz: Remote code execution due to improper input validation

An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline and 1 more

Products

Rex 100 Rex 100 Firmware Mbnet.mini and 3 more

CVE-2024-45276

MB connect line/Helmholz: tmp directory exposed via webservice

An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline

Products

Rex 100 Rex 100 Firmware Mbnet.mini and 2 more

CVE-2024-45275

MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline

Products

Rex 100 Rex 100 Firmware Mbnet.mini and 2 more

CVE-2024-45273

MB connect line/Helmholz: Weak encryption of configuration file

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline

Products

Myrex24.virtual Myrex24 V2 Myrex24 V2 Virtual Server and 32 more

« first previous Page 4 of 4.