CVE-2021-33526

7.8 highEPSS 0.3%

High (7.8) in mbconnectline mbdialup. EPSS 0.3% chance of exploitation in the next 30 days.

In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2021-08-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mbconnectline:mbdialup

References

https://cert.vde.com/de-de/advisories/vde-2021-017
https://cert.vde.com/de-de/advisories/vde-2021-017

Check your stack JSON