Skip to content
OpenAdvisories
Critical VDE-2021-003 18 CVEs

MB connect line: Multiple vulnerabilites in mymbCONNECT24 and mbCONNECT24 (Update A)

Published Sep 7, 2022 · Updated Sep 7, 2022

Vendor: MB connect line Product: mbCONNECT24 Product: mymbCONNECT24

Summary

Multiple vulnerabilities have been found in mymbCONNECT24 and mbCONNECT24.
Update A, 2022-09-07:

Affected Products: updated affected versions due to incomplete fixes of some CVEs. See Solution for details.
Solution: updated version information.
Solution: Added Fix for CVE-2020-35561.
Solution: Added MFA remark for CVE-2020-35565.

Details

Impact
please see cve id entries

Remediation
CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,
CVE-2020-12530, CVE-2020-35563, CVE-2020-35564,
CVE-2020-35569, CVE-2020-35559, Update to version >= 2.7.1

CVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.
Note: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2

CVE-2020-35567: None
Note: A proper fix for the underlying issue will come with a future architectural core-system-update.

CVE-2020-35565: None
Mitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin
Note: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.

CVE-2020-35561: Update to version 2.12.1

Update A, 2022-09-07:

CVE-2020-35557, CVE-2020-35570, CVE-2020-35558,
CVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1

Vulnerabilities 18

  • High 7.5
    CVE-2020-35558

    SSRF in products of MB connect line and Helmholz

    An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. There is an SSRF in the in the MySQL access check, allowing an attacker to scan for open ports and gain some information about possi…

  • Medium 6.5
    CVE-2020-12527

    Improper Access Validation in products of MB connect line and Helmholz

    An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corr…

    MB connect line Helmholz mymbCONNECT24 mbCONNECT24
  • Medium 6.5
    CVE-2020-12528

    An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Impro…

    MB connect line mymbCONNECT24 mbCONNECT24
  • Medium 6.5
    CVE-2020-35557

    Improper Access Validation in products of MB connect line and Helmholz

    An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the account he should not have access to due to improper use of access validation.

  • Medium 5.8
    CVE-2020-12529

    An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There …

    MB connect line mymbCONNECT24 mbCONNECT24
  • Medium 5.3
    CVE-2020-35561

    SSRF in variuos products of MB connect line and Helmholz

    An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. There is an SSRF in the HA module allowing an unauthenticated attacker to scan for open ports.

  • Medium 5.3
    CVE-2020-35566

    Local file inclusion vulnerability in products of MB connect line and Helmholz

    An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An attacker can read arbitrary JSON files via Local File Inclusion.

  • Medium 5.3
    CVE-2020-35570

    Foreced Browsing vulnerability in products of MB connect line and Helmholz

    An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. An unauthenticated attacker is able to access files (that should have been restricted) via forceful browsing.

  • Medium 4.3
    CVE-2020-12530

    An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There…

    MB connect line mymbCONNECT24 mbCONNECT24
  • Medium 4.3
    CVE-2020-35568

    Sensitive Information Exposure in products of MB connect line and Helmholz

    An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An incomplete filter applied to a database response allows an authenticated attacker to gain non-public information…

  • Unscored —
    CVE-2020-10384

    An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. Th…

  • Unscored —
    CVE-2020-35559

    An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unused function tha…

  • Unscored —
    CVE-2020-35560

    An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unauthenticated ope…

  • Unscored —
    CVE-2020-35563

    An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an incomplete XSS filt…

  • Unscored —
    CVE-2020-35564

    An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an outdated and unused…

  • Unscored —
    CVE-2020-35565

    An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The login pages bruteforce dete…

  • Unscored —
    CVE-2020-35567

    An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The software uses a secure pass…

  • Unscored —
    CVE-2020-35569

    An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is a self XSS issue with …

Revision history

  1. #1

    Initial revision.

References