Sensitive Information Exposure in products of MB connect line and Helmholz

Vulnerability

The vulnerability exists in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An incomplete filter applied to a database response allows an authenticated attacker to gain non-public information about other users and devices in the account. [2][3]

Exploitation

An attacker must be authenticated to the system. By crafting a request that triggers a database response with insufficient filtering, the attacker can retrieve data that should be restricted to other users or devices within the same account. No additional privileges or user interaction are required beyond authentication.

Impact

Successful exploitation results in unauthorized disclosure of non-public information about other users and devices, potentially including sensitive configuration details or personal data. The confidentiality of the system is compromised, but integrity and availability are not directly affected.

Mitigation

The issue is fixed in version 2.12.1. Users should update to this version or later. For MB connect line products, see advisory VDE-2021-003 [2]; for Helmholz products, see VDE-2022-039 [3]. No workarounds are mentioned in the references.