VULNERABILITY INTELLIGENCE

CVE-2021-33527

CVSS score10 HIGH

EPSS probability4.52%

CISA KEVNot currently listed

Published2021-08-02

Last modified2026-06-17

Description

In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service.