Description
In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MB connect line | mymbCONNECT24 | 2.8.0 – ≤ 2.8.0 | — |
| MB connect line | mbCONNECT24 | 2.8.0 – ≤ 2.8.0 | — |
Advisories 2
- VDE-2021-030 MB connect line: two vulnerabilities in mymbCONNECT24, mbCONNECT24 (Update A) CERT@VDE · Jun 6, 2025
- VDE-2022-039 Helmholz: Multiple vulnerabilites in myREX24 and myREX24.virtual CERT@VDE · Sep 7, 2022