Medium VDE-2021-031 2 CVEs

MB connect line: Apache Guacamole related vulnerabilities in mbCONNECT24

Published Jul 22, 2021 · Updated May 14, 2025 · Revision 2

Vendor: MB connect line Product: mbCONNECT24 Product: mymbCONNECT24

Summary

Two vulnerabilities in mbCONNECT24 and mymbCONNECT24 can lead to information disclosure and arbitrary code execution.

Please consult the CVE entries for details.

Details

Update to 2.9.0

Vulnerabilities 2

Unscored —

CVE-2020-9497

Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels. If…

guacamole-client guacamole-server Debian Ubuntu

Jul 2, 2020
Unscored —

CVE-2020-9498

Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual chan…

guacamole-client guacamole-server Debian Ubuntu

Jul 2, 2020

Revision history

2025-05-14 #2
Fix: version space, added distribution
2021-07-22 #1
Initial revision.

References

MB connect line advisory overview at CERT@VDE
https://certvde.com/en/advisories/vendor/mbconnectline/
VDE-2021-031: MB connect line: Apache Guacamole related vulnerabilities in mbCONNECT24 - HTML
https://certvde.com/en/advisories/VDE-2021-031