CVE-2021-33527

9.8 criticalEPSS 4.5%

Critical (9.8) in mbconnectline mbdialup. EPSS 4.5% chance of exploitation in the next 30 days.

In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.5% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-11-01)
CWE: CWE-20
Published: 2021-08-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mbconnectline:mbdialup

References

https://cert.vde.com/de-de/advisories/vde-2021-017
https://cert.vde.com/de-de/advisories/vde-2021-017

Check your stack JSON