CVE-2021-33527

Published: Aug 2, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD (Secondary)

Description

In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service.

Affected (1)

Products: Mbconnectline: Mbdialup

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mbconnectline Mbdialup	Up to 3.9r0.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://cert.vde.com/de-de/advisories/vde-2021-017

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/de-de/advisories/vde-2021-017

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.