CVE-2024-23942 — MB connect line: Configuration File on the client workstation is not encrypted

CVE-2024-23942

MB connect line: Configuration File on the client workstation is not encrypted PUBLISHED

Description (CNA)

A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing the cloud portal which leads to a DoS.

Affected (CNA)

Vendor / product	Versions
MB connect line / mbCONNECT24	affected 0 before 2.16.2
MB connect line / mbNET	affected 0 before 8.2.0
MB connect line / mbNET.rokey	affected 0 before 8.2.0
MB connect line / mymbCONNECT24	affected 0 before 2.16.2

CWE

CWE-312

References

https://cert.vde.com/en/advisories/VDE-2024-010

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.