CVE-2023-1779

mediumpriority · track · 0OT risk · elevatedEPSS 0.005 · 43 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.52% (43rd) EPSS

CVSS 4.3 · medium

Is it mine?

14 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · helmholz_psirt · mb_connect_line_psirt

EPSS · scored 2026-10-22

Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13.3 allow an authorized remote attacker with low privileges to view a limited amount of another accounts contact information.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedhelmholz_psirt
Update to latest Version: 2.13.4
Fixedmb_connect_line_psirt
Update to latest Version: 2.13.4
Mitigationhelmholz_psirt
Mitigation for CVE-2023-0985: If you have MFA enabled on the admin user, the password will still be set, but the attacker will be unable to login as the MFA is still in place.

cvss

Technical severity, 0–10. One row per scoring source.

4.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nsecondary · ENISA EU

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nsecondary · info@cert.vde.comexploitability 2.8 · impact 1.4

v3.14mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nsecondary · Helmholz PSIRT

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nsecondary · MB connect line PSIRT

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USCWE-863USCWE-863US

affected products (14)

Products and version ranges known to be affected.

mbCONNECT24≤ 1.0.0 ≤2.13.3enisa_euvdEU
myREX24≤ 0 ≤2.13.3enisa_euvdEU
myREX24.virtual≤ 0 ≤2.13.3enisa_euvdEU
mymbCONNECT24≤ 1.0.0 ≤2.13.3enisa_euvdEU
Helmholz myREX24≤ 2.13.3helmholz_psirtDE
Helmholz myREX24all versionsfixedhelmholz_psirtDE
Helmholz myREX24.virtualall versionsfixedhelmholz_psirtDE
Helmholz myREX24.virtual≤ 2.13.3helmholz_psirtDE
Firmware 2.13.4 installed on mbCONNECT24all versionsfixedmb_connect_line_psirtDE
Firmware 2.13.4 installed on mymbCONNECT24all versionsfixedmb_connect_line_psirtDE
Firmware <=2.13.3 installed on mbCONNECT24all versionsmb_connect_line_psirtDE
Firmware <=2.13.3 installed on mymbCONNECT24all versionsmb_connect_line_psirtDE
mbconnectline mbconnect24≤ 2.13.3nvdUScpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:*
mbconnectline mymbconnect24≤ 2.13.3nvdUScpe:2.3:a:mbconnectline:mymbconnect24:*:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

VDE-2023-008Helmholz: Multiple vulnerabilites in myREX24 and myREX24.virtual2023-05-15csaf · helmholz_psirtDE
Two vulnerabilites have been discovered in myREX24 and myREX24.virtual in all versions through 2.13.3.
vde-2023-002MB Connect Line: Multiple vulnerabilities in mbConnect24 and mymbConnect242023-05-15csaf · mb_connect_line_psirtDE
Two vulnerabilites have been discovered in mbCONNECT24 and mbCONNECT24 in all versions through 2.13.3.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd helmholz_psirt mb_connect_line_psirt nvd NVD CVE.org MITRE

published 2023-06-06modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan