CVE-2025-3090 — MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24

CVE-2025-3090

MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24 PUBLISHED

Description (CNA)

An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authentication for critical function.

Affected (CNA)

Vendor / product	Versions
MB connect line / mbCONNECT24	affected 0 before 2.18.0
MB connect line / mymbCONNECT24	affected 0 before 2.18.0
Helmholz / myREX24	affected 0 before 2.18.0
Helmholz / myREX24.virtual	affected 0 before 2.18.0

CWE

CWE-306

References

https://certvde.com/en/advisories/VDE-2025-034
https://certvde.com/en/advisories/VDE-2025-037

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.