MB connect line mbCONNECT24
Moderate fix1 remedy
cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 2.20.0
- 2.20.0
MB Connect Line mbCONNECT24 and mymbCONNECT24 SQL Injection Vulnerability
Vulnerability
Patched
A SQL injection vulnerability has been identified in the DevSerialReset function of MB Connect Line's mbCONNECT24 and mymbCONNECT24 products, all versions through 2.20.0. This vulnerability allows high-privileged remote attackers to exploit improper handling of special elements in SQL SELECT commands, leading to a complete loss of confidentiality.
Impact
Exploitation of this vulnerability allows for SQL injection, with varying degrees of database access depending on the specific vulnerability exploited.
Remediation
Users are advised to update their mbCONNECT24 or mymbCONNECT24 instance to version 2.20.1.
Added: May 27, 2026, 8:29 AM
Updated: May 27, 2026, 8:29 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
4.7remediation
7.7relevance
9.7threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.