Vulnerabilities > CVE-2020-12527

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

mbconnectline

helmholz

NVD

Published: 2021-03-02

Updated: 2024-11-21

Summary

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corresponding permissions.

Vulnerable Configurations

Part	Description	Count
Application	Mbconnectline Mbconnectline Mbconnect24 - Mbconnectline Mbconnect24 2.5.0 Mbconnectline Mbconnect24 2.6.1 Mbconnectline Mbconnect24 2.6.2 Mbconnectline Mbconnect24 2.8.0 Mbconnectline Mbconnect24 2.11.2 Mbconnectline Mymbconnect24 - Mbconnectline Mymbconnect24 2.5.0 Mbconnectline Mymbconnect24 2.6.1 Mbconnectline Mymbconnect24 2.6.2 Mbconnectline Mymbconnect24 2.8.0 Mbconnectline Mymbconnect24 2.11.2	12
Application	Helmholz Helmholz Myrex24.Virtual 2.11.2 Helmholz Myrex24 2.11.2	2

Vulnerabilities > CVE-2020-12527 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-12527"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-12527