MB connect line mbNET.mini
cpe:2.3:h:mbconnectline:mbnet.mini:*:*:*:*:*:*:*, +1 more
- <= 2.3.2
A persistent cross-site scripting vulnerability has been identified in MB connect line mbNET.mini devices running firmware prior to 2.3.3. This vulnerability allows high-privileged remote attackers to inject malicious scripts via POST requests, exploiting improper handling of special elements used in dynamic content creation.
Exploitation of this vulnerability allows for persistent cross-site scripting, where injected scripts are executed in the context of the user.
Users are advised to update to the latest version, 2.3.3.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.