Red Lion Europe: mbNET.mini vulnerable to OS command injection

There exists a vulnerability in all mbNET.mini devices with firmware <= 2.2.11 that allows an authenticated attacker to execute arbitrary system commands via GET requests.

Update: 03.07.2024 3:30 pm 

In section Reported by Sebastian Dietz (CyberDanube) was added.


CVE-2024-5672: 7.2

Red Lion Europe: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT24


CVE-2023-4834: 4.3

Red Lion Europe: Cross-site Scripting vulnerability in mbNET/mbNET.rokey

A stored XXS vulnerability has been found in mbNET and mbNET/.rokey in all versions before 7.3.2.


CVE-2023-34412: 4.8

Feeds

By Vendor

Archive

2024
2023
2022
2021
2020
2019
2018
2017

Legend

(Scoring for CVSS 2.0,3.0+3.1)
None
No CVE available
Low
0.1 <= 3.9
Medium
4.0 <= 6.9
High
7.0 <= 8.9
Critical
9.0 <= 10.0