MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Trust Management Issue Vulnerability

MB CONNECT LINE mymbCONNECT24 is an internal remote maintenance solution for virtual environments from the German company MB CONNECT LINE Mb Connect Line. mb CONNECT LINE mymbCONNECT24 and mbCONNECT24 have a trust management issue Vulnerability. No detailed vulnerability details are currently...

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Information Disclosure Vulnerability

MB CONNECT LINE mymbCONNECT24 is an internal remote maintenance solution for virtual environments from the German company MB CONNECT LINE Mb Connect Line. MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 is vulnerable to an information disclosure. An attacker could use this vulnerability to obtain...

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Cross-Site Scripting Vulnerability (CNVD-2021-56802)

MB CONNECT LINE mymbCONNECT24 is an internal remote maintenance solution for virtual environments from the German company MB CONNECT LINE Mb Connect Line. MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 are vulnerable to cross-site scripting. No detailed vulnerability details are currently availabl...

The vulnerability of industrial remote access systems mymbCONNECT24 and mb CONNECT24, related to insufficient validation of incoming requests, allows a hacker to perform SSRF attacks.

The vulnerability of industrial remote access systems mymbCONNECT24 and mb CONNECT24 is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack by scanning open ports...

The vulnerability of industrial remote access systems mymbCONNECT24 and mb CONNECT24 allows a hacker to implant malicious code.

The vulnerability of industrial remote access systems like mymbCONNECT24 and mb CONNECT24 exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject code remotely using the get parameter...

CVE-2020-12529

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to scan for open ports...

CVE-2020-12530

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There is an XSS issue in the redirect.php allowing an attacker to inject code via a get parameter...

CVE-2020-12527

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corresponding permissions...

CVE-2020-12530

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There is an XSS issue in the redirect.php allowing an attacker to inject code via a get parameter...

CVE-2020-12529

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to scan for open ports...

Improper access control

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corresponding permissions...

Design/Logic Flaw

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to scan for open ports...

Design/Logic Flaw

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There is an XSS issue in the redirect.php allowing an attacker to inject code via a get parameter...

Input validation

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to...

CVE-2020-12530

MB Connect Line MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 (all versions up to 2.6.2) are affected by a cross-site scripting (XSS) vulnerability in redirect.php that lets an attacker inject code through a GET parameter. The issue is documented across NVD, CVE records, and related advisories, i...

CVE-2020-12530

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There is an XSS issue in the redirect.php allowing an attacker to inject code via a get parameter...

CVE-2020-12529

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to scan for open ports...

CVE-2020-12529

MB connect line MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 contain a Server-Side Request Forgery (SSRF) vulnerability in the LDAP access check (CVE-2020-12529) that can enable an attacker to scan for open ports. Affected: all versions up to 2.6.2. Root cause: SSRF in LDAP access validation. Im...

CVE-2020-12528

The CVE-2020-12528 vulnerability affects MB connect line MB CONNECT LINE products mymbCONNECT24 and mbCONNECT24 up to version 2.6.2. It is caused by improper access validation that can allow a logged-in user to kill web2go sessions in an account they should not access. Public sources (CISA ICSA-2...

CVE-2020-12527 Improper Access Validation in products of MB connect line and Helmholz

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corresponding permissions...