Description
Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13.3 allow an authorized remote attacker with low privileges to view a limited amount of another accounts contact information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MB Connect Line | mbCONNECT24 | 1.0.0 – ≤ 2.13.3 | — |
| MB Connect Line | mymbCONNECT24 | 1.0.0 – ≤ 2.13.3 | — |
| Helmholz | myREX24 | ≤ 2.13.3 | — |
| Helmholz | myREX24.virtual | ≤ 2.13.3 | — |
Advisories 2
- VDE-2023-002 MB Connect Line: Multiple vulnerabilities in mbConnect24 and mymbConnect24 CERT@VDE · May 14, 2025
- VDE-2023-008 Helmholz: Multiple vulnerabilites in myREX24 and myREX24.virtual CERT@VDE · May 15, 2023