Medium severity4.3NVD Advisory· Published Feb 16, 2021· Updated Jun 17, 2026

CVE-2020-35568

Description

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An incomplete filter applied to a database response allows an authenticated attacker to gain non-public information about other users and devices in the account.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Helm/myREX24llm-create
Range: <=v2.11.2
Helm/myREX24.virtualllm-create
Range: <=v2.11.2
MB Connect Lines/mbCONNECT24llm-fuzzy
Range: <=v2.11.2

Patches

Vulnerability mechanics

References

cert.vde.com/en/advisories/VDE-2021-003nvdThird Party Advisory
cert.vde.com/en/advisories/VDE-2022-039nvdThird Party Advisory
mbconnectline.com/security-advice/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000