MB Connect Line: Multiple vulnerabilities in mbConnect24 and mymbConnect24
Advisory ansehen veröffentlicht 2023-05-15
Two vulnerabilites have been discovered in mbCONNECT24 and mbCONNECT24 in all versions through 2.13.3.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-1779US | —OT erhöht | — | ||
Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13… | ||||
| CVE-2023-0985US | — | — | ||
An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (3)
- Mitigation
If you have MFA enabled on the admin user, the password will still be set, but the attacker will be unable to login as the MFA is still in place.
- Behoben
Update to latest Version: 2.13.4
- Behoben
Update to latest Version: 2.13.4
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan