mbconnectline mbnet.mini firmware

Name: mbconnectline mbnet.mini firmware
Brand: mbconnectline

productUS

cpe:2.3:o:mbconnectline:mbnet.mini_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

1critical4high0medium0low

updated 2026-10-27

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-45274US	—OT elevated	1.53% (75th)	—	2.3.1	2024-10-15	< 2.3.1
CVE-2024-45275US	critical9.8OT elevated	0.80% (56th)	—	2.3.1	2024-10-15	< 2.3.1
CVE-2025-41679US	high7.5	0.76% (55th)	—	2.3.3	2025-07-21	< 2.3.3
CVE-2025-41675US	—	0.70% (53rd)	—	2.3.3	2025-07-21	< 2.3.3
CVE-2025-41674US	—	0.70% (53rd)	—	2.3.3	2025-07-21	< 2.3.3
CVE-2025-41673US	—	0.70% (53rd)	—	2.3.3	2025-07-21	< 2.3.3
CVE-2025-41678US	high7.2	0.69% (53rd)	—	2.3.3	2025-07-21	< 2.3.3
CVE-2025-41677US	—	0.67% (52nd)	—	2.3.3	2025-07-21	< 2.3.3
CVE-2025-41676US	—	0.63% (50th)	—	2.3.3	2025-07-21	< 2.3.3
CVE-2024-45276US	—OT elevated	0.63% (50th)	—	2.3.1	2024-10-15	< 2.3.1
CVE-2025-41681US	—	0.34% (27th)	—	2.3.3	2025-07-21	< 2.3.3
CVE-2024-45271US	high7.8	0.31% (24th)	—	2.3.1	2024-10-15	< 2.3.1
CVE-2024-45273US	high7.8	0.09% (1st)	—	2.3.1	2024-10-15	< 2.3.1

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-261Weak Encoding for Password1 CVEs
CWE-326Inadequate Encryption Strength1 CVEs
CWE-552Files or Directories Accessible to External Parties1 CVEs
CWE-787Out-of-bounds Write1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.