CVE-2026-33614

Description

References

• certvde.com/de/advisories/VDE-2026-030 · Third Party Advisory
• mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-030.json · Vendor Advisory

Autres vulnérabilités de mbconnect24

• CVE-2026-33617MOYENNE 5.3An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confid…
• CVE-2026-33616ÉLEVÉE 7.5An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vulnerability in the mb24api endpoint due to improper …
• CVE-2026-33615CRITIQUE 9.1An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutra…
• CVE-2026-33613ÉLEVÉE 8.8Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulnerability in the gene…
• CVE-2024-45273ÉLEVÉE 7.8An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of th…