← Back

Mbdialup

mbdialup

Vendor: Mbconnectline • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-33527
1Mbconnectline
1Mbdialup
Jun 17, 2026
Aug 2, 2021
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to...Show more
In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service.Show less
CVE-2021-33526
1Mbconnectline
1Mbdialup
Jun 17, 2026
Aug 2, 2021
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in a...Show more
In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service.Show less