Filtered by vendor Mbconnectline Subscriptions
Filtered by product Mbdialup Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-33527 1 Mbconnectline 1 Mbdialup 2024-11-21 9.8 Critical
In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service.
CVE-2021-33526 1 Mbconnectline 1 Mbdialup 2024-11-21 7.8 High
In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service.