MB Connect Line: Multiple vulnerabilities in mbConnect24 and mymbConnect24
view advisory published 2023-05-15
Two vulnerabilites have been discovered in mbCONNECT24 and mbCONNECT24 in all versions through 2.13.3.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-1779US | —OT elevated | — | ||
Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13… | ||||
| CVE-2023-0985US | — | — | ||
An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (3)
- Mitigation
If you have MFA enabled on the admin user, the password will still be set, but the attacker will be unable to login as the MFA is still in place.
- Fixed
Update to latest Version: 2.13.4
- Fixed
Update to latest Version: 2.13.4
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan