mymbCONNECT24 mb CONNECT24 Privilege Escalation

The vulnerability of industrial remote access systems mymbCONNECT24 and mb CONNECT24 is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to terminate web2go sessions in a user’s account that they have no access to...

CVE-2020-12528

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to...

CVE-2020-12528

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to...

CVE-2020-12528

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to...

CVE-2020-12528: Improper Privilege Management

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to...

PT-2021-2273

Name of the Vulnerable Software and Affected Versions: mymbCONNECT24 and mbCONNECT24 versions through V2.6.2 Description: The issue is related to improper use of access validation, allowing a logged-in user to kill web2go sessions in an account they should not have access to. This is due to...