ICSA-20-273-01_MB Connect line mbCONNECT24, mymbCONNECT24
Alik Koldobsky, Ofir Manzur, Hay Mizrachi, Nikolay Sokolik, and Haviv Vaizman from OTORIO reported these vulnerabilities to CISA.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-24568US | medium6.5 | — | ||
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the lancompenent component, allowing logged-in attackers t… | ||||
| CVE-2020-24570US | medium6.5 | — | ||
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resultant SSRF) in the com_mb24proxy module, allowing attackers… | ||||
| CVE-2020-24569US | medium4.3 | — | ||
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, all… | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- MitigationmbCONNECT24
Additional details can be found on the MB connect line website.
https://mbconnectline.com/security-advice/ - MitigationmbCONNECT24
Additional details can be found on the MB connect line website.
https://mbconnectline.com/security-advice/ - MitigationmbCONNECT24
Additional details can be found on the MB connect line website.
https://mbconnectline.com/security-advice/ - MitigationmymbCONNECT24
Additional details can be found on the MB connect line website.
https://mbconnectline.com/security-advice/ - MitigationmymbCONNECT24
Additional details can be found on the MB connect line website.
https://mbconnectline.com/security-advice/ - MitigationmymbCONNECT24
Additional details can be found on the MB connect line website.
https://mbconnectline.com/security-advice/ - FixedmbCONNECT24
MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.
- FixedmbCONNECT24
MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.
- FixedmbCONNECT24
MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.
- FixedmymbCONNECT24
MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.
- FixedmymbCONNECT24
MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.
- FixedmymbCONNECT24
MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan