Description (CNA)
An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An incomplete filter applied to a database response allows an authenticated attacker to gain non-public information about other users and devices in the account.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://mbconnectline.com/security-advice/
- https://cert.vde.com/en/advisories/VDE-2021-003
- https://cert.vde.com/en/advisories/VDE-2022-039
ADP enrichment
No English description supplied.