MB connect line: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT24
view advisory published 2023-10-16
In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-4834US | — | — | ||
In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authentic… | ||||
02
references
External citations — patches, advisories, analysis.
- VDE-2023-041: MB connect line: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT24 - HTMLself
- CERT@VDE Security Advisories for MB connect line GmbHexternal
- MB connect line Security Adviceexternal
- VDE-2023-041: MB connect line: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT24 - CSAFself
03
remediations (1)
- Fixed
Update to latest Version 2.14.3
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan