CVE-2023-0985

highpriority · track · 0EPSS 0.008 · 56 %ileDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.79% (56th) EPSS

CVSS 8.8 · high

Is it mine?

14 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · helmholz_psirt · mb_connect_line_psirt

EPSS · scored 2026-10-22

An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote user with low privileges can change the password of any user in the same account. This allows to take over the admin user and therefore fully compromise the account.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedhelmholz_psirt
Update to latest Version: 2.13.4
Fixedmb_connect_line_psirt
Update to latest Version: 2.13.4
Mitigationhelmholz_psirt
Mitigation for CVE-2023-0985: If you have MFA enabled on the admin user, the password will still be set, but the attacker will be unable to login as the MFA is still in place.
Mitigationmb_connect_line_psirt
If you have MFA enabled on the admin user, the password will still be set, but the attacker will be unable to login as the MFA is still in place.

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · info@cert.vde.comexploitability 2.8 · impact 5.9

v3.18.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Helmholz PSIRT

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · MB connect line PSIRT

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-639USCWE-639USCWE-639US

affected products (14)

Products and version ranges known to be affected.

mbCONNECT24≤ 1.0.0 ≤2.13.3enisa_euvdEU
myREX24≤ 0 ≤2.13.3enisa_euvdEU
myREX24.virtual≤ 0 ≤2.13.3enisa_euvdEU
mymbCONNECT24≤ 1.0.0 ≤2.13.3enisa_euvdEU
Helmholz myREX24≤ 2.13.3helmholz_psirtDE
Helmholz myREX24all versionsfixedhelmholz_psirtDE
Helmholz myREX24.virtualall versionsfixedhelmholz_psirtDE
Helmholz myREX24.virtual≤ 2.13.3helmholz_psirtDE
Firmware 2.13.4 installed on mbCONNECT24all versionsfixedmb_connect_line_psirtDE
Firmware 2.13.4 installed on mymbCONNECT24all versionsfixedmb_connect_line_psirtDE
Firmware <=2.13.3 installed on mbCONNECT24all versionsmb_connect_line_psirtDE
Firmware <=2.13.3 installed on mymbCONNECT24all versionsmb_connect_line_psirtDE
mbconnectline mbconnect24≤ 2.13.3nvdUScpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:*
mbconnectline mymbconnect24≤ 2.13.3nvdUScpe:2.3:a:mbconnectline:mymbconnect24:*:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

VDE-2023-008Helmholz: Multiple vulnerabilites in myREX24 and myREX24.virtual2023-05-15csaf · helmholz_psirtDE
Two vulnerabilites have been discovered in myREX24 and myREX24.virtual in all versions through 2.13.3.
vde-2023-002MB Connect Line: Multiple vulnerabilities in mbConnect24 and mymbConnect242023-05-15csaf · mb_connect_line_psirtDE
Two vulnerabilites have been discovered in mbCONNECT24 and mbCONNECT24 in all versions through 2.13.3.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd helmholz_psirt mb_connect_line_psirt nvd NVD CVE.org MITRE

published 2023-06-06modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan