MB
Product
Mbconnect24
38
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 14Medium 21Low 0
Watch
Add Mbconnect24 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-35565 | 9.8 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 Affected: through 2.6.2 |
| CVE-2020-10383 | 9.8 | Apr 14 | An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0 Affected: through 2.5.0 |
| CVE-2026-33615 | 9.1 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint Affected: through 2.19.4 |
| CVE-2026-33613 | 8.8 | Apr 2 | MB connect line mbCONNECT24 vulnerable to RCE in generateSrpArray Affected: through 2.19.4 |
| CVE-2023-0985 | 8.8 | Jun 6 | An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote… Affected: through 2.13.3 |
| CVE-2020-10382 | 8.8 | Apr 14 | An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0 Affected: through 2.5.0 |
| CVE-2024-45273 | 7.8 | Oct 15 | An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used Affected: before 2.16.3 |
| CVE-2020-35567 | 7.8 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 Affected: through 2.6.2 |
| CVE-2020-10384 | 7.8 | Apr 14 | An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1 Affected: through 2.6.1 |
| CVE-2020-12528 | 7.7 | Mar 2 | An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 Affected: through 2.6.2 |
| CVE-2026-33616 | 7.5 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the mb24api Endpoint Affected: through 2.19.4 |
| CVE-2026-33614 | 7.5 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the getinfo endpoint Affected: through 2.19.4 |
| CVE-2024-45272 | 7.5 | Oct 15 | An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost Affected: before 2.16.3 |
| CVE-2021-34580 | 7.5 | Oct 27 | In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login… Affected: through 2.9.0 |
| CVE-2021-34575 | 7.5 | Aug 2 | In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends Affected: through 2.8.0 |
| CVE-2020-35564 | 7.5 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 Affected: through 2.6.2 |
| CVE-2020-35558 | 7.5 | Feb 16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2 Affected: through 2.11.2 |
| CVE-2020-12527 | 6.5 | Mar 2 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 Affected: through 2.11.2 |
| CVE-2020-35557 | 6.5 | Feb 16 | An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the… Affected: through 2.11.2 |
| CVE-2020-24568 | 6.5 | Oct 2 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1 Affected: through 2.6.1 |
| CVE-2020-24570 | 6.5 | Sep 30 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1 Affected: through 2.6.1 |
| CVE-2020-12530 | 6.1 | Mar 2 | An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 Affected: through 2.6.2 |
| CVE-2020-35569 | 6.1 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 Affected: through 2.6.2 |
| CVE-2020-35560 | 6.1 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 Affected: through 2.6.2 |
| CVE-2020-35563 | 5.4 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 Affected: through 2.6.2 |
| CVE-2026-33617 | 5.3 | Apr 2 | MB connect line mbCONNECT24 vulnerable to an unauthenticated information disclosure in the data24 Endpoint Affected: through 2.19.4 |
| CVE-2022-22520 | 5.3 | Sep 14 | A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and… Affected: through 2.11.2 |
| CVE-2020-12529 | 5.3 | Mar 2 | An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to… Affected: through 2.6.2 |
| CVE-2020-35570 | 5.3 | Feb 16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2 Affected: through 2.11.2 |
| CVE-2020-35566 | 5.3 | Feb 16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 Affected: through 2.11.2 |
| CVE-2020-35561 | 5.3 | Feb 16 | An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 Affected: through 2.11.2 |
| CVE-2020-10381 | 5.3 | Apr 14 | An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0 Affected: through 2.5.0 |
| CVE-2023-4834 | 4.3 | Oct 16 | In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an… Affected: through 2.14.2 |
| CVE-2023-1779 | 4.3 | Jun 6 | Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions… Affected: through 2.13.3 |
| CVE-2021-34574 | 4.3 | Aug 2 | In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his… Affected: through 2.11.2 |
| CVE-2020-35568 | 4.3 | Feb 16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 Affected: through 2.11.2 |
| CVE-2020-35559 | 4.3 | Feb 16 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2 Affected: through 2.6.2 |
| CVE-2020-24569 | 4.3 | Sep 30 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1 Affected: through 2.6.1 |
Showing 38
