Vulnerabilities > CVE-2021-34574

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

mbconnectline

helmholz

NVD

Published: 2021-08-02

Updated: 2024-11-21

Summary

In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his account into a new password that violates the password policy by intercepting and modifying the request that is send to the server.

Vulnerable Configurations

Part	Description	Count
Application	Mbconnectline Mbconnectline Mbconnect24 - Mbconnectline Mbconnect24 2.5.0 Mbconnectline Mbconnect24 2.6.1 Mbconnectline Mbconnect24 2.6.2 Mbconnectline Mbconnect24 2.8.0 Mbconnectline Mbconnect24 2.11.2 Mbconnectline Mymbconnect24 - Mbconnectline Mymbconnect24 2.5.0 Mbconnectline Mymbconnect24 2.6.1 Mbconnectline Mymbconnect24 2.6.2 Mbconnectline Mymbconnect24 2.8.0 Mbconnectline Mymbconnect24 2.11.2	12
Application	Helmholz Helmholz Myrex24.Virtual 2.11.2 Helmholz Myrex24 2.11.2	2

Vulnerabilities > CVE-2021-34574 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2021-34574"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2021-34574