MB connect line: Multiple Vulnerabilities in mymbCONNECT24 and mbCONNECT24 <= v2.6.1
Advisory ansehen veröffentlicht 2020-09-18
Multiples issues exist in mymbCONNECT24 and mbCONNECT24
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-24568US | medium6.5 | — | ||
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the lancompenent component, allowing logged-in attackers t… | ||||
| CVE-2020-24570US | medium6.5 | — | ||
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resultant SSRF) in the com_mb24proxy module, allowing attackers… | ||||
| CVE-2020-24569US | medium4.3 | — | ||
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, all… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (3)
- Behoben
Update mymbCONNECT24 and mbCONNECT24 to version >v2.6.1
- Behoben
Update mymbCONNECT24 and mbCONNECT24 to version >v2.6.1
- Behoben
Update mymbCONNECT24 and mbCONNECT24 to version >v2.6.1
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan