High ICSA-20-273-01 3 CVEs

ICSA-20-273-01_MB Connect line mbCONNECT24, mymbCONNECT24

Published Sep 29, 2020 · Updated Sep 29, 2020

Vendor: MB connect line Product: mbCONNECT24 Product: mymbCONNECT24

Summary

Alik Koldobsky, Ofir Manzur, Hay Mizrachi, Nikolay Sokolik, and Haviv Vaizman from OTORIO reported these vulnerabilities to CISA.

Vulnerabilities 3

Unscored —

CVE-2020-24568

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection …

Oct 2, 2020
Unscored —

CVE-2020-24569

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection …

Sep 29, 2020
Unscored —

CVE-2020-24570

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with res…

Sep 29, 2020

Revision history

2020-09-29 #1
ICSA-20-273-01 MB Connect line mbCONNECT24, mymbCONNECT24

References

ICS Advisory ICSA-20-273-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-273-01