MB connect line vulnerabilities and threats

63 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.4%	CVE-2025-3091MB connect line mbCONNECT24 · Insecure Direct Object Reference High7.5EPSS 0.4%2025-06-24CVE Database V5CVE-2025-3091 An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password. EPSS 0.4%Vulnerability CWE-639	CVE Database V5	2025-06-24
High	8.2	EPSS 0.5%	CVE-2025-3090MB connect line mbCONNECT24 · Missing Authentication High8.2EPSS 0.5%2025-06-24CVE Database V5CVE-2025-3090 An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authentication for critical function. EPSS 0.5%Vulnerability CWE-306	CVE Database V5	2025-06-24
Critical	9.8	EPSS 1.5%	CVE-2024-45274MB connect line mbNET.mini · Missing Authentication Critical9.8EPSS 1.5%2024-10-15CVE Database V5CVE-2024-45274 An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication. EPSS 1.5%Vulnerability CWE-306	CVE Database V5	2024-10-15

Page 4 of 4