CVE-2026-33615

概要

参考情報

• certvde.com/de/advisories/VDE-2026-030 · Third Party Advisory
• mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-030.json · Vendor Advisory

mbconnect24 のその他の脆弱性

• CVE-2026-33617中 5.3An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confid…
• CVE-2026-33616高 7.5An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vulnerability in the mb24api endpoint due to improper …
• CVE-2026-33614高 7.5An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getinfo endpoint due to improper neutra…
• CVE-2026-33613高 8.8Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulnerability in the gene…
• CVE-2024-45273高 7.8An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of th…