Lucene search

MitreCVELIST:CVE-2020-35566

HistorySep 07, 2022 - 12:00 a.m.

CVE-2020-35566 Local file inclusion vulnerability in products of MB connect line and Helmholz

2022-09-0700:00:00

mitre

www.cve.org

mb connect line

helmholz

local file inclusion

json files

vulnerability

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.5%

JSON

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An attacker can read arbitrary JSON files via Local File Inclusion.

References

cert.vde.com/en/advisories/VDE-2021-003

cert.vde.com/en/advisories/VDE-2022-039

mbconnectline.com/security-advice/

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.5%

JSON

Related for CVELIST:CVE-2020-35566