MB connect line mbCONNECT24
Moderate fix1 remedy
cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 2.20.0
- 2.20.0
MB Connect Line mbCONNECT24 and mymbCONNECT24 SQL Injection Vulnerability
Vulnerability
Patched
A SQL injection vulnerability has been identified in the VerifyCreateLicences function of MB Connect Line's mbCONNECT24 and mymbCONNECT24 products, specifically in firmware versions 2.20.0 and prior. This vulnerability allows low-privileged remote attackers to exploit improper handling of special elements in SQL SELECT commands, leading to a complete loss of confidentiality.
Impact
Exploitation of this vulnerability allows for SQL injection, providing attackers with varying levels of access to the database.
Remediation
Users are advised to update their mbCONNECT24 or mymbCONNECT24 instance to version 2.20.1.
Added: May 27, 2026, 9:25 AM
Updated: May 27, 2026, 9:25 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
4.7remediation
7.7relevance
9.4threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.