CVE-2024-23943 — MB connect line: Cloud API access due to a lack of authentication for a critical function

CVE-2024-23943

MB connect line: Cloud API access due to a lack of authentication for a critical function PUBLISHED

Description (CNA)

An unauthenticated remote attacker can gain access to the cloud API due to a lack of authentication for a critical function in the affected devices. Availability is not affected.

Affected (CNA)

Vendor / product	Versions
MB connect line / mbCONNECT24	affected 0 before 2.16.2
MB connect line / mbNET	affected 0 before 8.2.0
MB connect line / mbNET.rokey	affected 0 before 8.2.0
MB connect line / mymbCONNECT24	affected 0 before 2.16.2

CWE

CWE-306

References

https://cert.vde.com/en/advisories/VDE-2024-010

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.