CVEvulnerability
CVE-2020-35570
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-02-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-425
Description
An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. An unauthenticated attacker is able to access files (that should have been restricted) via forceful browsing.
Affected configurations
• mbconnectline mbconnect24 (<= 2.11.2)
• mbconnectline mymbconnect24 (<= 2.11.2)
• helmholz myrex24 (<= 2.11.2)
• helmholz myrex24.virtual (<= 2.11.2)
Related
Weakness · CWE (1)
- CWE-425 Direct Request weakness
References
- https://cert.vde.com/en/advisories/VDE-2021-003 Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2022-039 Third Party Advisory
- https://mbconnectline.com/security-advice/ Vendor Advisory
- https://cert.vde.com/en/advisories/VDE-2021-003 Third Party Advisory
- https://cert.vde.com/en/advisories/VDE-2022-039 Third Party Advisory
- https://mbconnectline.com/security-advice/ Vendor Advisory