Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-23943 EUVD-2024-21373GHSA-8qm4-cq94-2553

MB connect line: Cloud API access due to a lack of authentication for a critical function

Published Mar 18, 2025 · Updated Mar 18, 2025 · Assigned by CERTVDE

Vendor: MB connect line Product: mbCONNECT24 Product: mbNET Product: mbNET.rokey Product: mymbCONNECT24

Description

An unauthenticated remote attacker can gain access to the cloud API due to a lack of authentication for a critical function in the affected devices. Availability is not affected.

Affected products

VendorProductAffectedFixed
MB connect line mbCONNECT24 < 2.16.2 2.16.2
MB connect line mbNET < 8.2.0 8.2.0
MB connect line mbNET.rokey < 8.2.0 8.2.0
MB connect line mymbCONNECT24 < 2.16.2 2.16.2

Advisories 2

References