MB connect line: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT24
Advisory ansehen veröffentlicht 2023-10-16
In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-4834US | — | — | ||
In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authentic… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- VDE-2023-041: MB connect line: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT24 - HTMLself
- CERT@VDE Security Advisories for MB connect line GmbHexternal
- MB connect line Security Adviceexternal
- VDE-2023-041: MB connect line: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT24 - CSAFself
03
Behebungen (1)
- Behoben
Update to latest Version 2.14.3
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan