📦 Mbnet.mini Firmware

by Mbconnectline

🔍 What is Mbnet.mini Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-45274

CRITICAL CVSS 9.8 Oct 15, 2024

This critical vulnerability allows unauthenticated remote attackers to execute arbitrary operating system commands on affected devices via UDP packets. It affects network devices with missing authenti...

CVE-2025-41675

HIGH CVSS 7.2 Jul 21, 2025

This vulnerability allows a high-privileged remote attacker to execute arbitrary operating system commands via GET requests to a cloud server communication script. The issue stems from improper input ...

CVE-2025-41673

HIGH CVSS 7.2 Jul 21, 2025

This vulnerability allows authenticated high-privileged remote attackers to execute arbitrary operating system commands via POST requests to the send_sms action. The flaw exists due to improper input ...

CVE-2024-45276

HIGH CVSS 7.5 Oct 15, 2024

CVE-2024-45276 allows unauthenticated remote attackers to read files from the /tmp directory due to missing authentication checks. This affects systems running vulnerable versions of the software with...

CVE-2024-45271

HIGH CVSS 8.4 Oct 15, 2024

An unauthenticated local attacker can gain administrative privileges by deploying a malicious configuration file due to improper input validation. This affects systems running vulnerable versions of t...

CVE-2024-45273

HIGH CVSS 8.4 Oct 15, 2024

CVE-2024-45273 allows an unauthenticated local attacker to decrypt device configuration files due to weak encryption implementation, potentially compromising the device. This affects systems using vul...

CVE-2025-41679

MEDIUM CVSS 5.3 Jul 21, 2025

An unauthenticated remote attacker can exploit a buffer overflow vulnerability in the Conftool network initialization wizard service, causing denial of service. This affects devices running vulnerable...

CVE-2025-41677

MEDIUM CVSS 4.9 Jul 21, 2025

This vulnerability allows a high-privileged remote attacker to cause denial of service by exhausting system resources through rapid crafted POST requests to the send-mail action. Systems running vulne...