{"document":{"acknowledgments":[{"organization":"CERT@VDE","summary":"coordination","urls":["https://certvde.com"]},{"names":["Moritz Abrell","Christian Zäske"],"organization":"SySS GmbH","summary":"reporting","urls":["https://www.syss.de"]}],"aggregate_severity":{"namespace":"https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale","text":"High"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en-GB","notes":[{"category":"summary","text":"Two command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.","title":"Summary"},{"category":"description","text":"The vulnerabilities allow for command injection in mbNET/mbNET.rokey/mbNET.mini with varying prerequisites resulting in full system compromise.\n\n","title":"Impact"},{"category":"description","text":"Update:\n\n- mbNET/mbNET.rokey: 8.4.5\n- mbNET.mini: 3.0.3","title":"Remediation"}],"publisher":{"category":"vendor","contact_details":"security-team@mbconnectline.de","name":"MB connect line GmbH","namespace":"https://mbconnectline.com"},"references":[{"category":"external","summary":"Product security incident reports","url":"https://mbconnectline.com/security-advice"},{"category":"self","summary":"Security Incident Management SIM#2026-01-2 - PDF","url":"https://advisories.mbconnectline.com/pdf/SIM2026-01-2.pdf"},{"category":"external","summary":"CERT@VDE Security Advisories for MB connect line","url":"https://certvde.com/en/advisories/vendor/mbconnectline"},{"category":"self","summary":"VDE-2026-054: MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini - HTML","url":"https://certvde.com/en/advisories/VDE-2026-054"},{"category":"self","summary":"VDE-2026-054: MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini - CSAF","url":"https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-054.json"}],"title":"MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini","tracking":{"aliases":["VDE-2026-054","SIM#2026-01-2"],"current_release_date":"2026-05-27T11:00:00.000Z","generator":{"date":"2026-05-27T11:00:00.000Z","engine":{"name":"Secvisogram","version":"2.5.44"}},"id":"VDE-2026-054","initial_release_date":"2026-05-27T11:00:00.000Z","revision_history":[{"date":"2026-05-27T11:00:00.000Z","number":"1.0.0","summary":"Initial revision."}],"status":"final","version":"1.0.0"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"mbNET/mbNET.rokey","product":{"name":"MB connect line mbNET","product_id":"CSAFPID-11003","product_identification_helper":{"cpe":"cpe:2.3:h:mb_connect_line:mbNET:*:*:*:*:*:*:*:*"}}},{"category":"product_name","name":"mbNET.mini","product":{"name":"MB connect line mbNET.mini","product_id":"CSAFPID-11004","product_identification_helper":{"cpe":"cpe:2.3:h:mb_connect_line:mbNET.mini:*:*:*:*:*:*:*:*"}}}],"category":"product_family","name":"Hardware"},{"branches":[{"category":"product_version_range","name":"vers:semver/<=8.4.4","product":{"name":"Firmware <=8.4.4","product_id":"CSAFPID-21004"}},{"category":"product_version","name":"8.4.5","product":{"name":"Firmware 8.4.5","product_id":"CSAFPID-21005","product_identification_helper":{"cpe":"cpe:2.3:o:mb_connect_line:mbNET_firmware:8.4.5:*:*:*:*:*:*:*"}}},{"category":"product_version","name":"8.4.4","product":{"name":"Firmware 8.4.4","product_id":"CSAFPID-21006","product_identification_helper":{"cpe":"cpe:2.3:o:mb_connect_line:mbNET_firmware:8.4.4:*:*:*:*:*:*:*"}}},{"category":"product_version_range","name":"vers:semver/<=3.0.2","product":{"name":"Firmware <=3.0.2","product_id":"CSAFPID-21007"}},{"category":"product_version","name":"3.0.3","product":{"name":"Firmware 3.0.3","product_id":"CSAFPID-21008","product_identification_helper":{"cpe":"cpe:2.3:o:mb_connect_line:mbNET.mini_firmware:3.0.3:*:*:*:*:*:*:*"}}},{"category":"product_version","name":"3.0.2","product":{"name":"Firmware 3.0.2","product_id":"CSAFPID-21009","product_identification_helper":{"cpe":"cpe:2.3:o:mb_connect_line:mbNET.mini_firmware:3.0.2:*:*:*:*:*:*:*"}}}],"category":"product_family","name":"Firmware"}],"category":"vendor","name":"MB connect line"}],"product_groups":[{"group_id":"CSAFGID-0001","product_ids":["CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010"],"summary":"Affected products."},{"group_id":"CSAFGID-0002","product_ids":["CSAFPID-31011","CSAFPID-31012"],"summary":"Fixed products."}],"relationships":[{"category":"installed_on","full_product_name":{"name":"Firmware <=8.4.4 installed on MB connect line mbNET/mbNET.rokey","product_id":"CSAFPID-31007"},"product_reference":"CSAFPID-21004","relates_to_product_reference":"CSAFPID-11003"},{"category":"installed_on","full_product_name":{"name":"Firmware <=3.0.2 installed on MB connect line mbNET.mini","product_id":"CSAFPID-31008"},"product_reference":"CSAFPID-21007","relates_to_product_reference":"CSAFPID-11004"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.4.4 installed on MB connect line mbNET/mbNET.rokey","product_id":"CSAFPID-31009","product_identification_helper":{"cpe":"cpe:2.3:o:mb_connect_line:mbNET:8.4.4:*:*:*:*:*:*:*"}},"product_reference":"CSAFPID-21006","relates_to_product_reference":"CSAFPID-11003"},{"category":"installed_on","full_product_name":{"name":"Firmware 3.0.2 installed on MB connect line mbNET.mini","product_id":"CSAFPID-31010","product_identification_helper":{"cpe":"cpe:2.3:o:mb_connect_line:mbNET.mini:3.0.2:*:*:*:*:*:*:*"}},"product_reference":"CSAFPID-21009","relates_to_product_reference":"CSAFPID-11004"},{"category":"installed_on","full_product_name":{"name":"Firmware 8.4.5 installed on MB connect line mbNET/mbNET.rokey","product_id":"CSAFPID-31011","product_identification_helper":{"cpe":"cpe:2.3:o:mb_connect_line:mbNET:8.4.5:*:*:*:*:*:*:*"}},"product_reference":"CSAFPID-21005","relates_to_product_reference":"CSAFPID-11003"},{"category":"installed_on","full_product_name":{"name":"Firmware 3.0.3 installed on MB connect line mbNET.mini","product_id":"CSAFPID-31012","product_identification_helper":{"cpe":"cpe:2.3:o:mb_connect_line:mbNET.mini:3.0.3:*:*:*:*:*:*:*"}},"product_reference":"CSAFPID-21008","relates_to_product_reference":"CSAFPID-11004"}]},"vulnerabilities":[{"cve":"CVE-2026-40851","cwe":{"id":"CWE-1287","name":"Improper Validation of Specified Type of Input"},"notes":[{"audience":"all","category":"description","text":"A low privileged local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.","title":"CVE Description"}],"product_status":{"fixed":["CSAFPID-31011","CSAFPID-31012"],"known_affected":["CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010"]},"references":[{"category":"external","summary":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - 8.5 / High","url":"https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}],"remediations":[{"category":"vendor_fix","details":"Update:\n\n- mbNET/mbNET.rokey: 8.4.5\n- mbNET.mini: 3.0.3","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","environmentalScore":8.4,"environmentalSeverity":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","temporalScore":8.4,"temporalSeverity":"HIGH","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010"]}],"title":"Command injection via USB"},{"cve":"CVE-2026-40852","cwe":{"id":"CWE-78","name":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"},"notes":[{"audience":"all","category":"description","text":"A high privileged attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to an system execute leading to code execution. This can result in a total loss of confidentiality, integrity and availability.","title":"CVE Description"}],"product_status":{"fixed":["CSAFPID-31011","CSAFPID-31012"],"known_affected":["CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010"]},"references":[{"category":"external","summary":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - 8.6 / High","url":"https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}],"remediations":[{"category":"vendor_fix","details":"Update:\n\n- mbNET/mbNET.rokey: 8.4.5\n- mbNET.mini: 3.0.3","group_ids":["CSAFGID-0001"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","environmentalScore":7.2,"environmentalSeverity":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","temporalScore":7.2,"temporalSeverity":"HIGH","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["CSAFPID-31007","CSAFPID-31008","CSAFPID-31009","CSAFPID-31010"]}],"title":"Command injection via malicious configuration"}]}