MB connect line: Multiple Vulnerabilities in mbNET.mini Product
Advisory ansehen veröffentlicht 2024-10-15
Multiple vulnerabilities have been discovered in MB connect line mbNET.mini product allowing for RCE or unauthorized file access.
01
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-45276US | —OT erhöht | — | ||
An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication. | ||||
| CVE-2024-45275US | critical9.8OT erhöht | — | ||
The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices. | ||||
| CVE-2024-45274US | —OT erhöht | — | ||
An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication. | ||||
| CVE-2024-45273US | high7.8 | — | ||
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used. | ||||
| CVE-2024-45271US | high7.8 | — | ||
An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Incident Management SIM#2024-04 - PDFself
- VDE-2024-056: MB connect line: Multiple Vulnerabilities in mbNET.mini Product - HTMLself
- CERT@VDE Security Advisories for MB connect lineexternal
- Product security incident reportsexternal
- VDE-2024-056: MB connect line: Multiple Vulnerabilities in mbNET.mini Product - CSAFself
03
Behebungen (5)
- BehobenFirmware <=2.2.13 installed on MB connect line mbNET.mini
Update mbNET.mini to the version 2.3.1
- BehobenFirmware <=2.2.13 installed on MB connect line mbNET.mini
Update mbNET.mini to the version 2.3.1
- BehobenFirmware <=2.2.13 installed on MB connect line mbNET.mini
Update mbNET.mini to the version 2.3.1
- BehobenFirmware <=2.2.13 installed on MB connect line mbNET.mini
Update mbNET.mini to the version 2.3.1
- BehobenFirmware <=2.2.13 installed on MB connect line mbNET.mini
Update mbNET.mini to the version 2.3.1
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan