Share: Email | Twitter

ID

VDE-2024-056

Published

2024-10-15 10:00 (CEST)

Last update

2024-10-15 09:14 (CEST)

Vendor(s)

MB connect line GmbH

Product(s)

Article No° Product Name Affected Version(s)
mbNET.mini <= 2.2.13

Summary

Multiple vulnerabilities have been discovered in MB connect line mbNET.mini product allowing for RCE or unauthorized file access.

Vulnerabilities



CVE-2024-45274
9.8
Last Update
Oct. 15, 2024, 9:13 a.m.
Severity
9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness
Missing Authentication for Critical Function (CWE-306)
Summary

An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.

Details
cert.vde.com 
CVE-2024-45275
9.8
Last Update
Oct. 15, 2024, 9:13 a.m.
Severity
9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness
Use of Hard-coded Credentials (CWE-798)
Summary

The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.

Details
cert.vde.com 
CVE-2024-45271
8.4
Last Update
Oct. 15, 2024, 9:13 a.m.
Severity
8.4 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness
Improper Input Validation (CWE-20)
Summary

An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation.

Details
cert.vde.com 
CVE-2024-45273
8.4
Last Update
Oct. 15, 2024, 9:13 a.m.
Severity
8.4 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness
Weak Encoding for Password (CWE-261)
Summary

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

Details
cert.vde.com 
CVE-2024-45276
7.5
Last Update
Oct. 15, 2024, 9:13 a.m.
Severity
7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness
Files or Directories Accessible to External Parties (CWE-552)
Summary

An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication.

Details
cert.vde.com 

Impact

CVE-2024-45271, CVE-2024-45274 and CVE-2024-45275 allow remote code execution with system privileges, resulting in full compromise of the device.

CVE-2024-45273 allows undetectable tampering and manipulation of encrypted configuration files.

CVE-2024-45276 allows unauthenticated access to potential sensitive files.

Solution

Remediation

Update mbNET.mini to version 2.3.1.

Reported by

CERT@VDE coordinated with Red Lion Europe

Reported by Moritz Abrell of SySS GmbH