Design/Logic Flaw

2021-03-0222:15:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

JSON

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to scan for open ports.

CPENameOperatorVersion
mbconnect24le2.6.2
mymbconnect24le2.6.2

CPE	Name	Operator	Version
	mbconnect24	le	2.6.2
	mymbconnect24	le	2.6.2

References

cert.vde.com/de-de/advisories/vde-2021-003