CVE-2020-35559

2021-02-1615:42:20

mitre

www.cve.org

mb connect line

mymbconnect24

ip exhaustion

account security

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

31.4%

JSON

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unused function that allows an authenticated attacker to use up all available IPs of an account and thus not allow creation of new devices and users.

References

cert.vde.com/de-de/advisories/vde-2021-003

mbconnectline.com/security-advice/