MB connect line PSIRT
organization01
Referenzen
Weitere Namen und Kennungen dieser Entität.
mb_connect_line_psirtDE security-team@mbconnectline.de
02
bewertete Schwachstellen (110)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-14448US | — | — | ||
An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the system_certificates view due to improper neutralization of special element… | ||||
| CVE-2026-10521US | — | — | ||
An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a… | ||||
| CVE-2026-40852US | — | — | ||
A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value… | ||||
| CVE-2026-40851US | — | — | ||
A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confiden… | ||||
| CVE-2026-40850US | — | — | ||
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountData function due to improper neutralization of special elements in a… | ||||
| CVE-2026-40849US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user_alarmprofile view due to improper neutralization of special elements in a S… | ||||
| CVE-2026-40848US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the tag view due to improper neutralization of special elements in a SQL SELECT comm… | ||||
| CVE-2026-40847US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system_tag view due to improper neutralization of special elements in a SQL SELE… | ||||
| CVE-2026-40846US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system view due to improper neutralization of special elements in a SQL SELECT c… | ||||
| CVE-2026-40845US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the devices_configuration view due to improper neutralization of special elements in… | ||||
| CVE-2026-40844US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dashboard view due to improper neutralization of special elements in a SQL SELEC… | ||||
| CVE-2026-40843US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the alarming view due to improper neutralization of special elements in a SQL SELECT… | ||||
| CVE-2026-40842US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getWidgetTags function due to improper neutralization of special elements in a S… | ||||
| CVE-2026-40841US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectTags function due to improper neutralization of special elements in a… | ||||
| CVE-2026-40840US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the VerifyCreateLicences function due to improper neutralization of special elements… | ||||
| CVE-2026-40839US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getComponentScalings function due to improper neutralization of special elements… | ||||
| CVE-2026-40838US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDeviceScalings function due to improper neutralization of special elements in… | ||||
| CVE-2026-40837US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectScalings function due to improper neutralization of special elements i… | ||||
| CVE-2026-40836US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the inmessage model due to improper neutralization of special elements in a SQL DELE… | ||||
| CVE-2026-40835US | — | — | ||
An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData function due to improper neutralization of special elements i… | ||||