Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

mbCONNECT24 — Vulnerabilities & Security Advisories 55

All 55 CVE vulnerabilities found in mbCONNECT24, with AI-generated Chinese analysis, references, and POCs.

This aggregation page documents security vulnerabilities affecting the mbCONNECT24 industrial connectivity gateway, focusing on specific weakness types and associated security tags. It collects reported flaws and patch advisories spanning the product's operational lifecycle, covering critical periods from its initial deployment through recent maintenance cycles. Users can utilize this repository to track vendor-issued advisories, analyze the prevalence of particular weakness classes within the device, and review the complete vulnerability history for the mbCONNECT24 hardware. The data provides a structured view of security incidents, enabling researchers and security teams to assess risk exposure and verify remediation status across different firmware versions. By centralizing these records, the page facilitates a comprehensive understanding of the security posture associated with this specific industrial component, allowing for systematic analysis of past and present threats without requiring separate lookups in disparate databases.

Vendor: MB Connect Line

CVE ID Title CVSS Severity Published
CVE-2026-40822 Authenticated SQLi in DevSerialReset function CWE-89 4.9 Medium 2026-05-27
CVE-2026-40821 Authenticated SQLi in getAccountByID function CWE-89 4.9 Medium 2026-05-27
CVE-2026-40819 Unauthenticated SQLi in sync_data24 task CWE-89 7.5 High 2026-05-27
CVE-2026-40818 Unauthenticated SQLi in _mb24confi_getDevice function function CWE-89 7.5 High 2026-05-27
CVE-2026-40817 Unauthenticated SQLi in getAlarmProfiles function CWE-89 7.5 High 2026-05-27
CVE-2026-40816 Unauthenticated SQLi in _mb24confi_getTagAlarm function CWE-89 7.5 High 2026-05-27
CVE-2026-40815 Unauthenticated SQLi in _mb24api_getUserAccount function CWE-89 7.5 High 2026-05-27
CVE-2026-40814 Unauthenticated SQLi in _mb24confi_getTagAlarm function CWE-89 7.5 High 2026-05-27
CVE-2026-40813 Unauthenticated SQLi in getLiveValues CWE-89 7.5 High 2026-05-27
CVE-2026-40812 Unauthenticated SQLi in getLiveValues function CWE-89 7.5 High 2026-05-27
CVE-2026-40811 Unauthenticated SQLi in ssoabstractservice CWE-89 7.5 High 2026-05-27
CVE-2026-40810 Unauthenticated SQLi in userinfo Endpoint CWE-89 7.5 High 2026-05-27
CVE-2026-33617 MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint CWE-497 5.3 Medium 2026-04-02
CVE-2026-33616 MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api Endpoint CWE-89 7.5 High 2026-04-02
CVE-2026-33615 MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint CWE-89 9.1 Critical 2026-04-02
CVE-2026-33614 MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpoint CWE-89 7.5 High 2026-04-02
CVE-2026-33613 MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray CWE-78 7.2 High 2026-04-02
CVE-2025-3091 MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24 CWE-639 7.5 High 2025-06-24
CVE-2025-3090 MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24 CWE-306 8.2 High 2025-06-24
CVE-2024-23943 MB connect line: Cloud API access due to a lack of authentication for a critical function CWE-306 9.1 Critical 2025-03-18
CVE-2024-23942 MB connect line: Configuration File on the client workstation is not encrypted CWE-312 7.1 High 2025-03-18
CVE-2024-45272 MB connect line/Helmholz: Generation of weak passwords vulnerability CWE-1391 7.5 High 2024-10-15
CVE-2023-4834 MB connect line mbCONNECT24和mymbCONNECT24 安全漏洞 CWE-269 4.3 Medium 2023-10-16
CVE-2023-1779 Helmholz and MB Connect Line: Account takeover via password reset in multiple products CWE-863 4.3 Medium 2023-06-06
CVE-2023-0985 Helmholz and MB Connect Line: Account takeover via password reset in multiple products CWE-639 8.8 High 2023-06-06

All 55 known CVE vulnerabilities affecting mbCONNECT24 with full Chinese analysis, references, and POCs where available.