← CVE Intelligence

CVE-2025-3092

MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24 PUBLISHED

Description (CNA)

An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint.

Affected (CNA)

Vendor / productVersions
Helmholz / myREX24affected 0 before 2.18.0
Helmholz / myREX24affected 0 before 2.16.5
Helmholz / myREX24.virtualaffected 0 before 2.18.0
Helmholz / myREX24.virtualaffected 0 before 2.16.5
MB connect line / mbCONNECT24affected 0 before 2.16.5
MB connect line / mymbCONNECT24affected 0 before 2.18.0
MB connect line / mymbCONNECT24affected 0 before 2.18.0
MB connect line / mymbCONNECT24affected 0 before 2.16.5

CWE

CWE-204

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.