Lucene search

MitreCVELIST:CVE-2020-35568

HistorySep 07, 2022 - 12:00 a.m.

CVE-2020-35568 Sensitive Information Exposure in products of MB connect line and Helmholz

2022-09-0700:00:00

mitre

www.cve.org

cve-2020-35568

information exposure

mb connect line

helmholz

database filter

authenticated attacker

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%

JSON

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An incomplete filter applied to a database response allows an authenticated attacker to gain non-public information about other users and devices in the account.

References

cert.vde.com/en/advisories/VDE-2021-003

cert.vde.com/en/advisories/VDE-2022-039

mbconnectline.com/security-advice/

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.6%

JSON

Related for CVELIST:CVE-2020-35568