Unrated severityNVD Advisory· Published Sep 14, 2022· Updated Sep 17, 2024

User enumeration vulnerability in MB connect line and Helmholz products

CVE-2022-22520

Description

A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.

Affected products

Mbconnectline/Mbconnect24v5
Range: 2
Mbconnectline/Mymbconnect24v5
Range: 2
Helmholz/myREX24v5
Range: 2
Helmholz/myREX24.virtualv5
Range: 2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

cert.vde.com/en/advisories/VDE-2022-011mitrex_refsource_CONFIRM
cert.vde.com/en/advisories/VDE-2022-039mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000