Skip to content
OpenAdvisories
High · 7.5 CVE-2025-3092 EUVD-2025-19011GHSA-w2r4-cm6p-7h86

MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24

Published Jun 24, 2025 · Updated Jun 24, 2025 · Assigned by CERTVDE

Vendor: Helmholz Vendor: MB connect line Product: mbCONNECT24 Product: mymbCONNECT24 Product: myREX24 Product: myREX24.virtual

Description

An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint.

Affected products

VendorProductAffectedFixed
Helmholz myREX24 < 2.18.0, < 2.16.5 2.18.0
Helmholz myREX24.virtual < 2.18.0, < 2.16.5 2.18.0
MB connect line mbCONNECT24 < 2.16.5 2.16.5
MB connect line mymbCONNECT24 < 2.18.0, < 2.16.5 2.18.0

Advisories 2

References