Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-22520

A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.

Published

2022-09-14T14:15:12.427

Last Modified

2024-11-21T06:46:56.837

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses

Type: Primary
CWE-204

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mbconnectline	mbconnect24	≤ 2.11.2	Yes
Application	mbconnectline	mymbconnect24	≤ 2.11.2	Yes
Application	helmholz	myrex24	≤ 2.11.2	Yes
Application	helmholz	myrex24.virtual	≤ 2.11.2	Yes

References

https://cert.vde.com/en/advisories/VDE-2022-011 Third Party Advisory, VDB Entry ([email protected])
https://cert.vde.com/en/advisories/VDE-2022-039 Not Applicable ([email protected])
https://cert.vde.com/en/advisories/VDE-2022-011 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://cert.vde.com/en/advisories/VDE-2022-039 Not Applicable (af854a3a-2127-422b-91ae-364da2661108)