Description
A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing the cloud portal which leads to a DoS.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MB connect line | mbCONNECT24 | < 2.16.2 | 2.16.2 |
| MB connect line | mbNET | < 8.2.0 | 8.2.0 |
| MB connect line | mbNET.rokey | < 8.2.0 | 8.2.0 |
| MB connect line | mymbCONNECT24 | < 2.16.2 | 2.16.2 |
Advisories 2
- VDE-2024-010 Vulnerabilities in mbCONNECT24/mymbCONNECT24 CERT@VDE · Aug 27, 2025
- VDE-2024-031 Helmholz: Vulnerabilities in myREX24 V2/myREX24.virtual CERT@VDE · May 14, 2025