MB connect line: Authenticated unintended access to critical program parameters in mbCONNECT24/mymbCONNECT24
Advisory ansehen veröffentlicht 2026-06-23
There is a vulnerability in mbCONNECT24/mymbCONNECT24 that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-10521US | — | — | ||
An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Incident Management SIM#2026-04 - PDFself
- VDE-2026-068: MB connect line: Authenticated unintended access to critical program parameters in mbCONNECT24/mymbCONNECT24 - HTMLself
- CERT@VDE Security Advisories for MB connect lineexternal
- Product security incident reportsexternal
- VDE-2026-068: MB connect line: Authenticated unintended access to critical program parameters in mbCONNECT24/mymbCONNECT24 - CSAFself
03
Behebungen (1)
- Behoben
Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.2.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan