Medium VDE-2020-035 3 CVEs

MB connect line: Multiple Vulnerabilities in mymbCONNECT24 and mbCONNECT24 <= v2.6.1

Published Sep 18, 2020 · Updated May 14, 2025 · Revision 4

Vendor: MB connect line Product: mbCONNECT24 Product: mymbCONNECT24

Summary

Multiples issues exist in mymbCONNECT24 and mbCONNECT24

Details

Impact
Please consult the above CVEs for details.

Remediation
Update mymbCONNECT24 and mbCONNECT24 to version >v2.6.1

Vulnerabilities 3

Unscored —

CVE-2020-24568

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection …

Oct 2, 2020
Unscored —

CVE-2020-24569

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection …

Sep 29, 2020
Unscored —

CVE-2020-24570

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with res…

Sep 29, 2020

Revision history

2025-05-14 #4
Fix: removed ia, added distribution
2025-02-12 #3
Fix: corrected self-reference, fixed version
2024-11-06 #2
Fix: added self-reference
2020-09-18 #1
Initial revision.

References

CERT@VDE Security Advisories for MB connect line GmbH
https://certvde.com/de/advisories/vendor/mbconnectline/
VDE-2020-035: MB connect line: Multiple Vulnerabilities in mymbCONNECT24 and mbCONNECT24 <= v2.6.1 - HTML
https://certvde.com/de/advisories/VDE-2020-035/