ICSA-20-273-01

icsaUScisa_csaf_ot

ICSA-20-273-01_MB Connect line mbCONNECT24, mymbCONNECT24

Advisory ansehen veröffentlicht 2020-09-29

Alik Koldobsky, Ofir Manzur, Hay Mizrachi, Nikolay Sokolik, and Haviv Vaizman from OTORIO reported these vulnerabilities to CISA.

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2020-24568USmedium6.5—
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the lancompenent component, allowing logged-in attackers t…
CVE-2020-24570USmedium6.5—
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resultant SSRF) in the com_mb24proxy module, allowing attackers…
CVE-2020-24569USmedium4.3—
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, all…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (12)

  • MitigationmbCONNECT24

    Additional details can be found on the MB connect line website.

    https://mbconnectline.com/security-advice/
  • MitigationmbCONNECT24

    Additional details can be found on the MB connect line website.

    https://mbconnectline.com/security-advice/
  • MitigationmbCONNECT24

    Additional details can be found on the MB connect line website.

    https://mbconnectline.com/security-advice/
  • MitigationmymbCONNECT24

    Additional details can be found on the MB connect line website.

    https://mbconnectline.com/security-advice/
  • MitigationmymbCONNECT24

    Additional details can be found on the MB connect line website.

    https://mbconnectline.com/security-advice/
  • MitigationmymbCONNECT24

    Additional details can be found on the MB connect line website.

    https://mbconnectline.com/security-advice/
  • BehobenmbCONNECT24

    MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.

  • BehobenmbCONNECT24

    MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.

  • BehobenmbCONNECT24

    MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.

  • BehobenmymbCONNECT24

    MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.

  • BehobenmymbCONNECT24

    MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.

  • BehobenmymbCONNECT24

    MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan