268 matches found
Input validation
An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to...
CVE-2020-12530
MB Connect Line MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 (all versions up to 2.6.2) are affected by a cross-site scripting (XSS) vulnerability in redirect.php that lets an attacker inject code through a GET parameter. The issue is documented across NVD, CVE records, and related advisories, i...
CVE-2020-12530
An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There is an XSS issue in the redirect.php allowing an attacker to inject code via a get parameter...
CVE-2020-12529
An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to scan for open ports...
CVE-2020-12529
MB connect line MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 contain a Server-Side Request Forgery (SSRF) vulnerability in the LDAP access check (CVE-2020-12529) that can enable an attacker to scan for open ports. Affected: all versions up to 2.6.2. Root cause: SSRF in LDAP access validation. Im...
CVE-2020-12528
The CVE-2020-12528 vulnerability affects MB connect line MB CONNECT LINE products mymbCONNECT24 and mbCONNECT24 up to version 2.6.2. It is caused by improper access validation that can allow a logged-in user to kill web2go sessions in an account they should not access. Public sources (CISA ICSA-2...
CVE-2020-12527 Improper Access Validation in products of MB connect line and Helmholz
An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corresponding permissions...
CVE-2020-12527
CVE-2020-12527 affects MB connect line products: mymbCONNECT24, mbCONNECT24, Helmholz myREX24, and myREX24.virtual (versions up to v2.11.2). The root cause is improper access validation that lets a logged-in user perform privileged actions (shutdown/reboot) on devices in their account without the...
MB CONNECT LINE mymbCONNECT24e 代码问题漏洞
Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A server-side request forgery vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which can be exploited by a remote...
MB connect line mbCONNECT24, mymbCONNECT24
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: MB connect line Equipment: mymbCONNECT24, mbCONNECT24 Vulnerabilities: Improper Privilege Management, Server-side Request Forgery SSRF, Cross-site Scripting, Uncontrolled Resource Consumption, Open...
MB CONNECT LINE mymbCONNECT24 安全漏洞
Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A privilege management error vulnerability exists in MB connect line mymbCONNECT24 and mbCONNECT24, which can be exploited by a remote...
MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Resource Management Error Vulnerability
Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A resource management error vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, before no detailed vulnerability...
MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Input Validation Error Vulnerability
Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. An input validation error vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, no details of the vulnerability are...
MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 cross-site scripting vulnerability (CNVD-2021-17235)
Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A cross-site scripting vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which arises from the failure of a network...
MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Cross-Site Request Forgery Vulnerability
Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A cross-site request forgery vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which can be exploited by an attacke...
Unspecified vulnerability in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 (CNVD-2021-17234)
Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A security vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, no details of the vulnerability are provided at this...
MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Access Control Vulnerabilities
Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. An access control vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which can be exploited by remote attackers to...
MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Privilege Management Error Vulnerability (CNVD-2021-17241)
Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A privilege management error vulnerability exists in MB connect line mymbCONNECT24 and mbCONNECT24, which can be exploited by a remote...
