CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0985

An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote user with low privileges can change the password of any user in the same account. This allows to take over the admin user and therefore fully compromise the account.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 4.4%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2023-0985

Mbconnectline » Mbconnect24 » Version: N/A

cpe:2.3:a:mbconnectline:mbconnect24:-
Mbconnectline » Mbconnect24 » Version: 2.11.2

cpe:2.3:a:mbconnectline:mbconnect24:2.11.2
Mbconnectline » Mbconnect24 » Version: 2.13.3

cpe:2.3:a:mbconnectline:mbconnect24:2.13.3
Mbconnectline » Mbconnect24 » Version: 2.5.0

cpe:2.3:a:mbconnectline:mbconnect24:2.5.0
Mbconnectline » Mbconnect24 » Version: 2.6.1

cpe:2.3:a:mbconnectline:mbconnect24:2.6.1
Mbconnectline » Mbconnect24 » Version: 2.6.2

cpe:2.3:a:mbconnectline:mbconnect24:2.6.2
Mbconnectline » Mbconnect24 » Version: 2.8.0

cpe:2.3:a:mbconnectline:mbconnect24:2.8.0
Mbconnectline » Mymbconnect24 » Version: N/A

cpe:2.3:a:mbconnectline:mymbconnect24:-
Mbconnectline » Mymbconnect24 » Version: 2.11.2

cpe:2.3:a:mbconnectline:mymbconnect24:2.11.2
Mbconnectline » Mymbconnect24 » Version: 2.13.3

cpe:2.3:a:mbconnectline:mymbconnect24:2.13.3
Mbconnectline » Mymbconnect24 » Version: 2.5.0

cpe:2.3:a:mbconnectline:mymbconnect24:2.5.0
Mbconnectline » Mymbconnect24 » Version: 2.6.1

cpe:2.3:a:mbconnectline:mymbconnect24:2.6.1
Mbconnectline » Mymbconnect24 » Version: 2.6.2

cpe:2.3:a:mbconnectline:mymbconnect24:2.6.2
Mbconnectline » Mymbconnect24 » Version: 2.8.0

cpe:2.3:a:mbconnectline:mymbconnect24:2.8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-0985

Products

Pricing

Contact Us