VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Sep 14, 2022· Updated Jun 17, 2026

CVE-2022-22520

CVE-2022-22520

Description

A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Helm/myREX24.virtual2 versions
    cpe:2.3:a:helmholz:myrex24.virtual:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:helmholz:myrex24.virtual:*:*:*:*:*:*:*:*range: <=2.11.2
    • (no CPE)range: 2
  • Helm/myREX243 versions
    cpe:2.3:a:helmholz:myrex24:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:helmholz:myrex24:*:*:*:*:*:*:*:*range: <=2.11.2
    • (no CPE)range: <=v2.11.2
    • (no CPE)range: 2
  • Mbconnectline/Mymbconnect244 versions
    cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:*range: <=2.11.2
    • cpe:2.3:a:mbconnectline:mymbconnect24:*:*:*:*:*:*:*:*range: <=2.11.2
    • (no CPE)range: 2
    • (no CPE)range: 2
  • MB Connect Lines/mbCONNECT24llm-fuzzy
    Range: <=v2.11.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.