PatchTheCVEmbnet.mini firmware vulnerabilities and fixes
Recent CVEs affecting mbnet.mini firmware, with upgrade or downgrade steps. 13 tracked.
Also searched as: mbnet mini firmware, mbnet.minifirmware, mbnetmini firmware.
mbnet.mini firmware has 13 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 13. Most recent: 2025-07-21. Highest priority: CVE-2024-45274 (score 58/100).
- CVE-2025-41681 MEDIUM 4.8 UPGRADE A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of
- CVE-2025-41679 MEDIUM 5.3 UPGRADE An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denia
- CVE-2025-41678 MEDIUM 6.5 UPGRADE A high privileged remote attacker can alter the configuration database via POST requests due to improper neutr
- CVE-2025-41677 MEDIUM 4.9 UPGRADE A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST r
- CVE-2025-41676 MEDIUM 4.9 UPGRADE A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST r
- CVE-2025-41675 HIGH 7.2 UPGRADE A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server c
- CVE-2025-41674 HIGH 7.2 UPGRADE A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic ac
- CVE-2025-41673 HIGH 7.2 UPGRADE A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms acti
- CVE-2024-45276 HIGH 7.5 UPGRADE UPGRADE An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authent
- CVE-2024-45275 CRITICAL 9.8 UPGRADE UPGRADE The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote
- CVE-2024-45274 CRITICAL 9.8 UPGRADE UPGRADE An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication
- CVE-2024-45273 HIGH 8.4 UPGRADE UPGRADE An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due
- CVE-2024-45271 HIGH 8.4 UPGRADE UPGRADE An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input v
FAQ
How do I fix mbnet.mini firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mbnet.mini firmware being exploited right now?
None of the tracked mbnet.mini firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mbnet.mini firmware CVE should I patch first?
CVE-2024-45274 currently ranks highest (58/100): An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.